Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete the sitemap via a request to the wp-html-sitemap page in wp-admin/options-general.php...

WordPress HTML Sitemap插件'inc/AdminPage.php'跨站请求伪造漏洞

Bugtraq ID:66528 WordPress是一款内容管理系统。 WordPress HTML Sitemap插件存在跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 WordPress HTML Sitemap Plugin 1.2 目前没有详细解决方案： http://wordpress.org/plugins/wp-html-sitemap/ form...