CVE-2023-7269

creationtimestamp| type| source ---|---|--- 2024-07-19 08:40:55+00:00| seen| https://t.me/cvedetector/1194...

CVE-2023-7269 ArtPlacer Widget < 2.21.2 - Stored XSS via CSRF

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2023-7269 ArtPlacer Widget < 2.21.2 - Stored XSS via CSRF

The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress ArtPlacer Widget Plugin < 2.21.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software ArtPlacer Widget Type Plugin Vulnerable versions 2.21.2 Fixed in 2.21.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-7269 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID a04f7e509db4 Credits Bob Matyas Required...