The Discy WordPress theme before 5.2... CVE-2022-1422

4.3 AV AC AU C I A
发布： 2022-06-08
修订： 2024-11-21

The Discy WordPress theme before 5.2 does not check for CSRF tokens in the AJAX action discy_reset_options, allowing an attacker to trick an admin into resetting the site settings back to defaults.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息