QwikSec

Security Database

CVE

CWE

Training

CVE-2022-1763

Published: Jun 13, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

Due to missing checks the Static Page eXtended WordPress plugin through 2.1 is vulnerable to CSRF attacks which allows changing the plugin settings, including required user levels for specific features. This could also lead to Stored Cross-Site Scripting due to the lack of escaping in some of the settings

Vendor	Product	Versions
Unknown	Static Page eXtended	affected `2.1 - <= 2.1`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/bd3aff73-078a-4e5a-b9e3-1604851c6df8

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.