Lucene search
PRIOn knowledge basePRION:CVE-2022-1780HistoryJun 13, 2022 - 1:15 p.m.
Cross site scripting
2022-06-1313:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
21.2%
The LaTeX for WordPress plugin through 3.4.10 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack which could also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping
Related
patchstack
patchstack
cvelist
cvelist
cve
cve
CVE-2022-1780
2022-06-13 13:15:12
wpvulndb
wpvulndb
cnvd
cnvd
WordPress LaTeX plugin cross-site request forgery vulnerability
2022-06-15 00:00:00
nvd
nvd
CVE-2022-1780
2022-06-13 13:15:12
wpexploit
wpexploit