Back to search
CVE-2022-22734
Published: Mar 14, 2022
Modified: Aug 3, 2024
PUBLISHED
Description
The Simple Quotation WordPress plugin through 1.3.2 does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes. As a result, attacker could make a logged in admin create or edit arbitrary quote, and put Cross-Site Scripting payloads in them
| Vendor | Product | Versions |
|---|---|---|
Unknown | Simple Quotation | affected 0 - <= 1.3.2 |
References
https://wpscan.com/vulnerability/f6e15a23-8f8c-47c2-8227-e277856d8251
exploit
vdb-entry
technical-description
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now