WordPress Disqus Plugin 2.7.5 - Admin Stored CSRF and XSS

2014-08-1400:00:00

Nik Cubrilovic

patchstack.com

0.002 Low

EPSS

Percentile

61.4%

Disqus plugin is prone to an admin stored CSRF and XSS vulnerabilities.

Solution

           Update the plugin.

CPENameOperatorVersion
disqusle2.7.5

CPE	Name	Operator	Version
	disqus	le	2.7.5

www.exploit-db.com/exploits/34336/

0.002 Low

EPSS

Percentile

61.4%

Related for PATCHSTACK:F6731ADC93F40660AE0045B43CD49C60