WordPress Dropdown Menu Widget Plugin <= 1.7.1 - CSRF and XSS

2013-03-2600:00:00

N/A

patchstack.com

EPSS

0.001

Percentile

39.7%

JSON

Because of this vulnerability, the attackers can hijack the authentication of arbitrary users for requests that insert cross-site scripting sequences.

Solution

           Update the plugin.

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2704

EPSS

0.001

Percentile

39.7%

JSON

Related for PATCHSTACK:F98250CD7A4BD9E6F4B3BE887B799C48