6 matches found
Cross site request forgery (csrf)
The తెల�గ� బైబిల� వచనమ�ల� WordPress plugin through 1.0 is lacking any CSRF check when saving its settings and verses, and do not sanitise or escape them when outputting them back in the page. This could allow attackers to make a logged in admin change the...
CVE-2021-24410 Telugu Bible Verse Daily <= 1.0 - CSRF to Stored XSS
The తెలుగు బైబిల్ వచనములు WordPress plugin through 1.0 is lacking any CSRF check when saving its settings and verses, and do not sanitise or escape them when outputting them back in the page. This could allow attackers to make a logged in admin change the settings, as well as add malicious verses...
PT-2021-15943 · WordPress · తెలుగు బైబిల్ వచనములు
Name of the Vulnerable Software and Affected Versions: తెలుగు బైబిల్ వచనములు WordPress plugin version 1.0 Description: The issue is related to the lack of CSRF check when saving settings and verses, and the failure to sanitise or escape them when outputting them back in the page. This could allow...
WordPress plugin Telugu Bible Verse Daily 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
Telugu Bible Verse Daily <= 1.0 - CSRF to Stored XSS
The plugin is lacking any CSRF check when saving its settings and verses, and do not sanitise or escape them when outputting them back in the page. This could allow attackers to make a logged in admin change the settings, as well as add malicious verses containing JavaScript code in them, leading...
Telugu Bible Verse Daily <= 1.0 - CSRF to Stored XSS
The plugin is lacking any CSRF check when saving its settings and verses, and do not sanitise or escape them when outputting them back in the page. This could allow attackers to make a logged in admin change the settings, as well as add malicious verses containing JavaScript code in them, leading...