Lucene search
WpvulndbWPVDB-ID:B06F0EC2-EDD7-468D-88DD-84CA15C3911EHistoryJun 15, 2022 - 12:00 a.m.
Photo Gallery by Supsystic < 1.15.6 - Arbitrary Settings Update via CSRF
2022-06-1500:00:00
wpscan.com
12
0.001 Low
EPSS
Percentile
20.9%
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| gallery-by-supsystic | lt | 1.15.6 |
Related
prion
prion
Cross site request forgery (csrf)
2022-06-15 20:15:00
patchstack
patchstack
cnvd
cnvd
WordPress Photo Gallery plugin跨站请求伪造漏洞
2022-06-17 00:00:00
cve
cve
CVE-2021-36891
2022-06-15 20:15:17
cvelist
cvelist
nvd
nvd
CVE-2021-36891
2022-06-15 20:15:17
wpexploit
wpexploit
Photo Gallery by Supsystic < 1.15.6 - Arbitrary Settings Update via CSRF
2022-06-15 00:00:00