Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-0875
HistoryJun 27, 2022 - 9:15 a.m.

Cross site scripting

2022-06-2709:15:00
PRIOn knowledge base
www.prio-n.com
4

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%

The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as escape them, allowing attackers to make a logged in admin change them and perform Cross-Site Scripting attacks

CPENameOperatorVersion
google_authenticatorlt1.0.5

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%

Related for PRION:CVE-2022-0875