Skip to content
Sign in
4.3 Medium

CVE-2024-7984 The Joy Of Text Lite WordPress plugin through 2.3.1 does not have CSRF check in place when updating its settings, which…

Description

The Joy Of Text Lite WordPress plugin through 2.3.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
Joy Of Text Lite 2.3 earliest → 2.3.1 No fix stated

Other CVEs of Joy Of Text Lite

The 2 CVEs of Joy Of Text Lite →
CVE-2022-4099 The Joy Of Text Lite WordPress plugin before 2.3.1 does not properly sanitise and escape some parameters before using… 9.8 Critical
Track this CVE