Lucene search
WPScanVULNRICHMENT:CVE-2022-1618HistoryJan 16, 2024 - 3:52 p.m.
CVE-2022-1618 Coru LFMember <= 1.0.2 - Stored Cross-Site Scripting via CSRF
2024-01-1615:52:50
WPScan
github.com
1
coru lfmember
stored cross-site scripting
csrf
wordpress plugin
csrf check
sanitisation
escaping
admin
xss payloads
The Coru LFMember WordPress plugin through 1.0.2 does not have CSRF check in place when adding a new game, and is lacking sanitisation as well as escaping in their settings, allowing attacker to make a logged in admin add an arbitrary game with XSS payloads
Related
wpvulndb
wpvulndb
Coru LFMember <= 1.0.2 - Stored Cross-Site Scripting via CSRF
2022-04-26 00:00:00
cvelist
cvelist
CVE-2022-1618 Coru LFMember <= 1.0.2 - Stored Cross-Site Scripting via CSRF
2024-01-16 15:52:50
nvd
nvd
CVE-2022-1618
2024-01-16 16:15:09
prion
prion
Cross site request forgery (csrf)
2024-01-16 16:15:00
cve
cve
CVE-2022-1618
2024-01-16 16:15:09
wpexploit
wpexploit
Coru LFMember <= 1.0.2 - Stored Cross-Site Scripting via CSRF
2022-04-26 00:00:00
AI Score
6.1
Confidence
High
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2022-1618