WordPress Easy Social Icons Plugin 1.2.2 - CSRF

2015-02-2300:00:00

Eric Flokstra

patchstack.com

0.006 Low

EPSS

Percentile

77.7%

JSON

Easy Social Icons plugin is prone to a cross-site request forgery vulnerability because of insufficient validation is performed on the “image_file” parameter which allows arbitrary JavaScript.

Solution

           Upgrade the plugin.

CPENameOperatorVersion
easy social iconsle1.2.2

CPE	Name	Operator	Version
	easy social icons	le	1.2.2

References

www.exploit-db.com/exploits/36161/

0.006 Low

EPSS

Percentile

77.7%

JSON

Related for PATCHSTACK:ADE3424E9A01E70D51E1F8D8391B4F46