Non notée
CVE-2022-1695 The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page,…
Description
The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Simple Adsense Insertion 2.1 | premières → < 2.1 | 2.1 |