Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-1787
HistoryJun 13, 2022 - 1:15 p.m.

Cross site scripting

2022-06-1313:15:00
PRIOn knowledge base
www.prio-n.com
5

0.001 Low

EPSS

Percentile

21.3%

The Sideblog WordPress plugin through 6.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping

CPENameOperatorVersion
sideblogle6.0

0.001 Low

EPSS

Percentile

21.3%