CVE Database
/

CVE-2022-1418

Back to search

CVE-2022-1418

Published: May 16, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

The Social Stickers WordPress plugin through 2.2.9 does not have CSRF checks in place when updating its Social Network settings, and does not escape some of these fields, which could allow attackers to make a logged-in admin change them and lead to Stored Cross-Site Scripting issues.

VendorProductVersions

Unknown

Social Stickers

affected
2.2.9 - <= 2.2.9

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now