Lucene search
PRIOn knowledge basePRION:CVE-2014-9437HistoryJan 02, 2015 - 7:59 p.m.
Cross site request forgery (csrf)
2015-01-0219:59:00
PRIOn knowledge base
www.prio-n.com
4
Multiple cross-site request forgery (CSRF) vulnerabilities in the Sliding Social Icons plugin 1.61 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or (2) conduct cross-site scripting (XSS) attacks via the sc_social_slider_margin parameter in a wpbs_save_settings action in the wpbs_panel page to wp-admin/admin.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sliding_social_icons | eq | 1.61 |
Related
cve
cve
CVE-2014-9437
2015-01-02 19:59:06
wpvulndb
wpvulndb
Sliding Social Icons <= 1.61 - CSRF & Stored XSS
2014-12-15 00:00:00
patchstack
patchstack
WordPress Sliding Social Icons Plugin <= 1.61 - Multiple CSRF and XSS
2015-01-02 00:00:00
cvelist
cvelist
CVE-2014-9437
2015-01-02 19:00:00
nvd
nvd
CVE-2014-9437
2015-01-02 19:59:06