Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:B69E1F10-7D7C-48A4-A4F2-2791304F8185
HistoryOct 31, 2022 - 12:00 a.m.

Mantenimiento web < 0.14 - Stored XSS via CSRF

2022-10-3100:00:00
wpscan.com
9
mantenimiento web
stored xss
csrf
missing csrf check
sanitisation
escaping
logged in admin
attackers
software

0.001 Low

EPSS

Percentile

20.9%

JSON

The plugin does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

CPENameOperatorVersion
mantenimiento-weblt0.14

Related

patchstack 1
cve 1
cvelist 1
cnvd 1
prion 1
nvd 1
patchstack
patchstack
WordPress Mantenimiento web plugin <= 0.13 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)
2022-10-31 00:00:00
cve
cve
CVE-2022-38075
2022-11-18 19:15:29
cvelist
cvelist
CVE-2022-38075 WordPress Mantenimiento web plugin <= 0.13 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)
2022-10-31 00:00:00
cnvd
cnvd
WordPress Mantenimiento Web Cross-Site Request Forgery Vulnerability
2022-11-23 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-11-18 19:15:00
nvd
nvd
CVE-2022-38075
2022-11-18 19:15:29

0.001 Low

EPSS

Percentile

20.9%

JSON
Related for WPVDB-ID:B69E1F10-7D7C-48A4-A4F2-2791304F8185
patchstack1cve1cvelist1cnvd1prion1nvd1