WordPress ScrollTo Top plugin <= 1.2.2 - Cross-Site Request Forgery to Arbitrary File Upload vulnerability

Cross-Site Request Forgery to Arbitrary File Upload vulnerability discovered by István Márton in WordPress Plugin ScrollTo Top versions = 1.2.2...

PT-2024-37541 · WordPress · Cg Scroll To Top

Name of the Vulnerable Software and Affected Versions: ScrollTo Top plugin for WordPress versions up to, and including, 1.2.2 Description: The issue is due to missing nonce validation and missing file type validation in the options page function, making it possible for unauthenticated attackers t...

WordPress ScrollTo Top Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software ScrollTo Top Type Plugin Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-6320 Patch priority Medium CVSS severity Medium 9.6 Developer Claim ownership PSID 2d9ac3963025 Credits István Márton...

CVE-2024-6320: Cross-Site Request Forgery (CSRF)

The ScrollTo Top plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 1.2.2. This is due to missing nonce validation and missing file type validation in the 'optionspage' function. This makes it possible for unauthenticated...