Lucene search

PNG to JPG < 4.1 - Stored Cross-Site Scripting via CSRF

🗓️ 06 May 2022 00:00:00Reported by wpvulndbType

PNG to JPG plugin lacks CSRF check in settings update, enabling attackers to perform actions via CSRF attack, leading to Stored XSS issues

Reporter	Title	Published	Views	Family All 5
Prion	Cross site scripting	20 May 202221:15	–	prion
NVD	CVE-2022-29430	20 May 202221:15	–	nvd
Cvelist	CVE-2022-29430 WordPress PNG to JPG plugin <= 4.0 - Cross-Site Request Forgery (CSRF) leading to Persistent Cross-Site Scripting (XSS) vulnerability	20 May 202220:44	–	cvelist
Patchstack	WordPress PNG to JPG plugin <= 4.0 - Cross-Site Request Forgery (CSRF) leading to Persistent Cross-Site Scripting (XSS) vulnerability	6 May 202200:00	–	patchstack
CVE	CVE-2022-29430	20 May 202221:15	–	cve

Vulners

Node

png_to_jpg_project png_to_jpgRange<4.1wordpress

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 May 2022 00:00Current

4.3Medium risk

Vulners AI Score4.3

EPSS0.001