Lucene search
PRIOn knowledge basePRION:CVE-2018-6357HistoryJan 27, 2018 - 5:29 p.m.
Cross site request forgery (csrf)
2018-01-2717:29:00
PRIOn knowledge base
www.prio-n.com
2
The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant social_widget_icon_array_order XSS.
| CPE | Name | Operator | Version |
|---|---|---|---|
| social_media_widget | le | 3.2.5 |
Related
nvd
nvd
CVE-2018-6357
2018-01-27 17:29:00
patchstack
patchstack
cvelist
cvelist
CVE-2018-6357
2022-10-03 16:21:47
cve
cve
CVE-2018-6357
2022-10-03 16:21:47
wpvulndb
wpvulndb
Social Media Widget by Acurax <= 3.2.5 - Stored XSS & CSRF
2018-01-07 00:00:00