CVE-2022-1757

CVE-2022-1757 affects the Pagebar WordPress plugin (versions prior to 2.70). The root cause is missing CSRF protection when updating settings, coupled with insufficient sanitization, enabling a logged-in admin change via CSRF and potentially stored XSS. Public docs indicate vulnerable settings up...

CVE-2022-1757: Cross-Site Request Forgery (CSRF)

The pagebar WordPress plugin before 2.70 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation in some of them, it could also lead to Stored XSS issues...