Aller au contenu
5.4 Moyenne

CVE-2023-7083 The Voting Record WordPress plugin through 2.0 does not have CSRF check in some places, and is missing sanitisation as…

Description

The Voting Record WordPress plugin through 2.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

Produits et versions touchés

Produit Versions touchées Corrigé en
Voting Record 2.0 premières → 2.0 Pas de correctif indiqué
Les 2 CVE de Voting Record →
Suivre cette CVE