Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcmsodevelopername parameter in a save action to...

CVE-2012-5387

Cross-site request forgery CSRF vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcmsodevelopername parameter in a save action to...

PT-2012-5970

Name of the Vulnerable Software and Affected Versions White Label CMS plugin version 1.5 for WordPress Description A cross-site scripting XSS issue allows remote authenticated administrators to inject arbitrary web script or HTML. This is achieved via the wlcms o developer name parameter in a sav...

PT-2012-5969

Name of the Vulnerable Software and Affected Versions White Label CMS plugin versions prior to 1.5.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcms o developer nam...