Lucene search

K
wpvulndbWpvulndbWPVDB-ID:4D885F55-6FE3-4353-9DF4-C7BA232981D0
HistoryJan 17, 2020 - 12:00 a.m.

Marketo Forms and Tracking <= 1.0.2 - CSRF to XSS

2020-01-1700:00:00
wpscan.com
8

0.003 Low

EPSS

Percentile

70.0%

Lack of CSRF checks and sanitisation on the plugin’s settings page could allow XSS attacks via CSRF.

PoC

CPENameOperatorVersion
marketo-forms-and-trackingeq*

0.003 Low

EPSS

Percentile

70.0%

Related for WPVDB-ID:4D885F55-6FE3-4353-9DF4-C7BA232981D0