Lucene search
WpvulndbWPVDB-ID:CBDFB9FA-4070-49EC-8271-E9C9C5D1523CHistoryNov 14, 2022 - 12:00 a.m.
Follow Me Plugin <= 3.1.1 - Stored XSS via CSRF
2022-11-1400:00:00
wpscan.com
11
plugin
csrf attack
stored xss
settings
sanitisation
escaping
admin
0.001 Low
EPSS
Percentile
45.3%
The plugin does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
Related
nvd
nvd
CVE-2022-3240
2022-11-15 14:15:10
cvelist
cvelist
CVE-2022-3240
2022-11-15 13:25:57
prion
prion
Cross site request forgery (csrf)
2022-11-15 14:15:00
cve
cve
CVE-2022-3240
2022-11-15 14:15:10