Cross site request forgery (csrf)

2019-09-2517:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

The alo-easymail plugin before 2.6.01 for WordPress has CSRF with resultant XSS in pages/alo-easymail-admin-options.php.

CPENameOperatorVersion
alo-easymaillt2.6.01

CPE	Name	Operator	Version
	alo-easymail	lt	2.6.01

References

packetstormsecurity.com/files/133594/

wordpress.org/plugins/alo-easymail/

wpvulndb.com/vulnerabilities/8190