Lucene search
Rasi Afeef (Patchstack Alliance)PATCHSTACK:B146683BA3F80A7E4E20FBB06D8EDC93HistorySep 01, 2022 - 12:00 a.m.
WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)
2022-09-0100:00:00
Rasi Afeef (Patchstack Alliance)
patchstack.com
9
0.001 Low
EPSS
Percentile
21.0%
Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) discovered by Rasi Afeef (Patchstack Alliance) in WordPress CallRail Phone Call Tracking plugin (versions <= 0.4.9).
Solution
Update the WordPress CallRail Phone Call Tracking plugin to the latest available version (at least 0.4.10).
| CPE | Name | Operator | Version |
|---|---|---|---|
| callrail phone call tracking | le | 0.4.9 |
Related
cve
cve
CVE-2022-36796
2022-09-01 17:15:08
nvd
nvd
CVE-2022-36796
2022-09-01 17:15:08
prion
prion
Cross site request forgery (csrf)
2022-09-01 17:15:00
wpvulndb
wpvulndb
CallRail Phone Call Tracking < 0.4.10 - Stored XSS via CSRF
2022-09-01 00:00:00
