Lucene search
PRIOn knowledge basePRION:CVE-2022-3847HistoryNov 28, 2022 - 2:15 p.m.
Cross site request forgery (csrf)
2022-11-2814:15:00
PRIOn knowledge base
www.prio-n.com
6
wordpress
csrf
xss
sanitization
attacker
The Showing URL in QR Code WordPress plugin through 0.0.1 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin or editor add Stored XSS payloads via a CSRF attack
| CPE | Name | Operator | Version |
|---|---|---|---|
| showing_url_in_qr_code | eq | 0.0.1 |
Related
cnvd
cnvd
WordPress Showing URL in QR Code plugin cross-site scripting vulnerability
2022-11-30 00:00:00
cve
cve
CVE-2022-3847
2022-11-28 14:15:17
cvelist
cvelist
CVE-2022-3847 Showing URL in QR Code <= 0.0.1 - Stored XSS via CSRF
2022-11-28 13:50:08
nvd
nvd
CVE-2022-3847
2022-11-28 14:15:17
wpexploit
wpexploit
Showing URL in QR Code <= 0.0.1 - Stored XSS via CSRF
2022-11-03 00:00:00
wpvulndb
wpvulndb
Showing URL in QR Code <= 0.0.1 - Stored XSS via CSRF
2022-11-03 00:00:00