Thumbnail Slider With Lightbox < 1.0.1 - Arbitrary File Upload via CSRF

2023-11-1700:00:00

wpscan.com

plugin

csrf check

addedit feature

arbitrary files

logged in admins

security

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.9%

JSON

Description The plugin does not have CSRF check in the addedit feature, which could allow attackers to make logged in admins upload arbitrary files via a CSRF attack

CPENameOperatorVersion
eq1.0.1

CPE	Name	Operator	Version
		eq	1.0.1