CVE-2021-24466
N/A
N/A
Summary
The Verse-O-Matic WordPress plugin through 4.1.1 does not have any CSRF checks in place, allowing attackers to make logged in administrators do unwanted actions, such as add/edit/delete arbitrary verses and change the settings. Due to the lack of sanitisation in the settings and verses, this could also lead to Stored Cross-Site Scripting issues
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | Verse-O-Matic | 4.1.1 <= 4.1.1 | affected |
Weaknesses
- CWE-79: CWE-79 Cross-site Scripting (XSS)
- CWE-352: CWE-352 Cross-Site Request Forgery (CSRF)
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.