The Ask me WordPress theme before... CVE-2022-1251

- AV AC AU C I A
发布: 2022-08-22
修订: 2024-11-21

The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted request.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息