Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) discovered by Takahiro Yamashita (Cryptography Laboratory - Tokyo Denki University) in WordPress SEO Backlinks plugin (versions <= 4.0.1).
This plugin has been closed as of July 23, 2021 and is not available for download. This closure is temporary, pending a full review.
CPE | Name | Operator | Version |
---|---|---|---|
seo backlinks | le | 4.0.1 |