Lucene search
Ex.Mi (Patchstack)PATCHSTACK:8C40145271EEF018414F8420C6DC0C3EHistoryApr 28, 2022 - 12:00 a.m.
WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability
2022-04-2800:00:00
Ex.Mi (Patchstack)
patchstack.com
12
0.001 Low
EPSS
Percentile
20.9%
Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability discovered by Ex.Mi (Patchstack) in WordPress Hermit 音乐播放器 plugin (versions <= 3.1.6).
Solution
Deactivate and delete. This plugin has been closed as of April 25, 2022 and is not available for download. This closure is temporary, pending a full review.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hermit 音乐播放器 | le | 3.1.6 |
Related
wpvulndb
wpvulndb
Hermit <= 3.1.6 - Stored Cross-Site Scripting via CSRF
2022-04-28 00:00:00
cvelist
cvelist
cve
cve
CVE-2022-29413
2022-04-28 17:15:39
nvd
nvd
CVE-2022-29413
2022-04-28 17:15:39
prion
prion
Cross site request forgery (csrf)
2022-04-28 17:15:00