Lucene search
WpvulndbWPVDB-ID:A3EA58A7-05D1-4DDE-B83F-A72B3FBE0540HistoryNov 17, 2023 - 12:00 a.m.
Webmaster Tools <= 2.0 - Settings Update to Stored XSS via CSRF
2023-11-1700:00:00
wpscan.com
4
webmaster tools
csrf
sanitization
stored xss
attack
Description The plugin does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
Related
prion
prion
Cross site request forgery (csrf)
2023-11-13 10:15:00
vulnrichment
vulnrichment
cve
cve
CVE-2023-46092
2023-11-13 10:15:07
cvelist
cvelist
nvd
nvd
CVE-2023-46092
2023-11-13 10:15:07
wordfence
wordfence
AI Score
6
Confidence
High
EPSS
0.001
Percentile
17.0%
Related for WPVDB-ID:A3EA58A7-05D1-4DDE-B83F-A72B3FBE0540