Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-1695
HistoryJun 08, 2022 - 10:15 a.m.

Cross site request forgery (csrf)

2022-06-0810:15:00
PRIOn knowledge base
www.prio-n.com
5

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%

The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form.

CPENameOperatorVersion
wp_simple_adsense_insertionlt2.1

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%