Lucene search
PRIOn knowledge basePRION:CVE-2022-4103HistoryJan 09, 2023 - 11:15 p.m.
Cross site request forgery (csrf)
2023-01-0923:15:00
PRIOn knowledge base
www.prio-n.com
8
royal elementor addons
authenticated users
csrf checks
arbitrary posts
The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorisation and CSRF checks when creating a template, and does not ensure that the post created is a template. This could allow any authenticated users, such as subscriber to create a post (as well as any post type) with an arbitrary title
| CPE | Name | Operator | Version |
|---|---|---|---|
| royal_elementor_addons | lt | 1.3.56 |
Related
nvd
nvd
CVE-2022-4103
2023-01-09 23:15:27
cvelist
cvelist
cve
cve
CVE-2022-4103
2023-01-09 23:15:27
openvas
openvas