Lucene search
MitreCVELIST:CVE-2018-6357HistoryJan 27, 2018 - 5:00 p.m.
CVE-2018-6357
2018-01-2717:00:00
mitre
www.cve.org
3
cve-2018-6357
acurax-social-media-widget
function.php
csrf
recordsarray parameter
wp-admin/admin-ajax.php
xss
The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant social_widget_icon_array_order XSS.
Related
prion
prion
Cross site request forgery (csrf)
2018-01-27 17:29:00
cve
cve
CVE-2018-6357
2018-01-27 17:29:00
patchstack
patchstack
wpvulndb
wpvulndb
Social Media Widget by Acurax <= 3.2.5 - Stored XSS & CSRF
2018-01-07 00:00:00
nvd
nvd
CVE-2018-6357
2018-01-27 17:29:00