Lucene search
PRIOn knowledge basePRION:CVE-2022-1781HistoryJun 13, 2022 - 1:15 p.m.
Cross site scripting
2022-06-1313:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
21.2%
The postTabs WordPress plugin through 2.10.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, which also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping
Related
nvd
nvd
CVE-2022-1781
2022-06-13 13:15:12
cve
cve
CVE-2022-1781
2022-06-13 13:15:12
wpexploit
wpexploit
postTabs <= 2.10.6 - Arbitrary Settings Update via CSRF to Stored XSS
2022-05-23 00:00:00
cnvd
cnvd
WordPress postTabs plugin cross-site request forgery vulnerability
2022-06-15 00:00:00
cvelist
cvelist
patchstack
patchstack
wpvulndb
wpvulndb
postTabs <= 2.10.6 - Arbitrary Settings Update via CSRF to Stored XSS
2022-05-23 00:00:00