2 matches found
Cross site request forgery (csrf)
The Post Index WordPress plugin is vulnerable to Cross-Site Request Forgery via the OptionsPage function found in the /php/settings.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.7.5...
6.8CVSS8.5AI score0.007EPSS
SaveExploits2References2Affected Software1
WordPress 插件 跨站请求伪造漏洞
WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in the WordPress plugin, which stems from the vulnerability to cross-site request forgery via the OptionsPage function in the php settings.php file, which allows an attacker to inject arbitrary we...
8.8CVSS7.8AI score0.007EPSS
SaveExploits2References3
20