Lucene search
PRIOn knowledge basePRION:CVE-2019-1000003HistoryFeb 04, 2019 - 9:29 p.m.
Cross site request forgery (csrf)
2019-02-0421:29:00
PRIOn knowledge base
www.prio-n.com
1
MapSVG MapSVG Lite version 3.2.3 contains a Cross Site Request Forgery (CSRF) vulnerability in REST endpoint /wp-admin/admin-ajax.php?action=mapsvg_save that can result in an attacker can modify post data, including embedding javascript. This attack appears to be exploitable via the victim must be logged in to WordPress as an admin, and click a link. This vulnerability appears to have been fixed in 3.3.0 and later.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mapsvg_lite | eq | 3.2.3 |
Related
cve
cve
CVE-2019-1000003
2019-02-04 21:29:00
wpvulndb
wpvulndb
MapSVG Lite <= 3.2.3 - Cross-Site Request Forgery (CSRF)
2019-01-08 00:00:00
wpexploit
wpexploit
MapSVG Lite <= 3.2.3 - Cross-Site Request Forgery (CSRF)
2019-01-08 00:00:00
cvelist
cvelist
CVE-2019-1000003
2019-02-04 21:00:00
checkpoint_advisories
checkpoint_advisories
WordPress MapSVG Lite Plugin Cross Site Request Forgery (CVE-2019-1000003)
2019-08-08 00:00:00
nvd
nvd
CVE-2019-1000003
2019-02-04 21:29:00