The WP-chgFontSize WordPress plugin... CVE-2022-1764
3.5
AV
AC
AU
C
I
A
发布：
2022-06-13
修订：
2024-11-21
The WP-chgFontSize WordPress plugin through 1.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有1条受影响产品信息
