CVE-2014-9368

Cross-site request forgery CSRF vulnerability in the twitterDash plugin 2.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the usernametwitterDash parameter in the twitterDash.php page...

CVE-2014-9368

Affected software: WordPress twitterDash plugin, version 2.1 and earlier. Vulnerability: CSRF that allows remote attackers to hijack administrator authentication and trigger stored XSS via the username_twitterDash parameter in twitterDash.php directing requests to wp-admin/options-general.php. Im...

WordPress twitterDash 2.1 CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in twitterDash Wordpress Plugin Author: Manideep K CVE-ID: CVE-2014-9368 Plugin Homepage: https://wordpress.org/plugins/twitterdash/ Version Affected: 2.1 probably lower versions Severity: High About Plugin: twitterDash adds a field on the Dashboard. In this...