Non notée
CVE-2022-0875 The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not…
Description
The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as escape them, allowing attackers to make a logged in admin change them and perform Cross-Site Scripting attacks
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Google Authenticator 1.0 | premières → < 1.0.5 | 1.0.5 |