Lucene search
Rasi Afeef (Patchstack Alliance)PATCHSTACK:A5AF5964813BC5AEEEB804AC3300AF95HistoryOct 31, 2022 - 12:00 a.m.
WordPress Mantenimiento web plugin <= 0.13 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)
2022-10-3100:00:00
Rasi Afeef (Patchstack Alliance)
patchstack.com
9
wordpress
mantenimiento web
plugin
vulnerability
cross-site request forgery
stored cross-site scripting
rasi afeef
patchstack alliance
update
EPSS
0.001
Percentile
20.8%
Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) discovered by Rasi Afeef (Patchstack Alliance) in the WordPress Mantenimiento web plugin (versions <= 0.13).
Solution
Update the WordPress Mantenimiento web plugin to the latest available version (at least 0.14).
Related
cnvd
cnvd
WordPress Mantenimiento Web Cross-Site Request Forgery Vulnerability
2022-11-23 00:00:00
cvelist
cvelist
cve
cve
CVE-2022-38075
2022-11-18 19:15:29
prion
prion
Cross site request forgery (csrf)
2022-11-18 19:15:00
wpvulndb
wpvulndb
Mantenimiento web < 0.14 - Stored XSS via CSRF
2022-10-31 00:00:00
nvd
nvd
CVE-2022-38075
2022-11-18 19:15:29