Lucene search
WpvulndbWPVDB-ID:DA91EB8A-BDB8-4511-987F-402E884C830DHistoryJun 22, 2022 - 12:00 a.m.
Free Live Chat Support <= 1.0.12 - Stored Cross-Site Scripting via CSRF
2022-06-2200:00:00
wpscan.com
13
stored cross-site scripting
csrf
plugin
vulnerability
EPSS
0.002
Percentile
60.0%
The plugin does not have CSRF check in place when updating its settings and is lacking escaping as well as sanitisation in some of them, which could allow attackers to make a logged in admin change them and put XSS payloads in them via a CSRF attack
Related
cve
cve
CVE-2022-2039
2022-07-18 17:15:08
prion
prion
Cross site request forgery (csrf)
2022-07-18 17:15:00
nvd
nvd
CVE-2022-2039
2022-07-18 17:15:08
cvelist
cvelist
CVE-2022-2039
2022-07-18 16:12:50