Lucene search
PRIOn knowledge basePRION:CVE-2022-3911HistoryJan 02, 2023 - 10:15 p.m.
Cross site request forgery (csrf)
2023-01-0222:15:00
PRIOn knowledge base
www.prio-n.com
4
iubenda plugin
wordpress
csrf
authenticated users
unauthorized privileges
ajax action
The iubenda WordPress plugin before 3.3.3 does does not have authorisation and CSRF in an AJAX action, and does not ensure that the options to be updated belong to the plugin as long as they are arrays. As a result, any authenticated users, such as subscriber can grant themselves any privileges, such as edit_plugins etc
| CPE | Name | Operator | Version |
|---|---|---|---|
| iubenda-cookie-law-solution | lt | 3.3.3 |
Related
openvas
openvas
wpexploit
wpexploit
iubenda < 3.3.3 - Subscriber+ Privileges Escalation to Admin
2022-12-12 00:00:00
cvelist
cvelist
CVE-2022-3911 iubenda < 3.3.3 - Subscriber+ Privileges Escalation to Admin
2023-01-02 21:49:36
nvd
nvd
CVE-2022-3911
2023-01-02 22:15:15
wpvulndb
wpvulndb
iubenda < 3.3.3 - Subscriber+ Privileges Escalation to Admin
2022-12-12 00:00:00
cve
cve
CVE-2022-3911
2023-01-02 22:15:15