Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbDaniel RufWPVDB-ID:8C8DAD47-8591-47DC-B84F-8C5CB18B2D78
HistoryJun 01, 2022 - 12:00 a.m.

Clean-Contact <= 1.6 - Arbitrary Settings Update to Stored XSS via CSRF

2022-06-0100:00:00
Daniel Ruf
wpscan.com
8
plugin
csrf
stored xss
vulnerability

EPSS

0.001

Percentile

25.9%

JSON

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS due to the lack of sanitisation and escaping as well

PoC

Related

prion 1
patchstack 1
cnvd 1
wpexploit 1
nvd 1
cvelist 1
cve 1
prion
prion
Cross site request forgery (csrf)
2022-06-27 09:15:00
patchstack
patchstack
WordPress Clean-Contact plugin <= 1.6 - Arbitrary Settings Update to Stored XSS via CSRF vulnerability
2022-06-01 00:00:00
cnvd
cnvd
WordPress Clean-Contact plugin跨站请求伪造漏洞
2022-06-30 00:00:00
wpexploit
wpexploit
Clean-Contact <= 1.6 - Arbitrary Settings Update to Stored XSS via CSRF
2022-06-01 00:00:00
nvd
nvd
CVE-2022-1914
2022-06-27 09:15:10
cvelist
cvelist
CVE-2022-1914 Clean-Contact <= 1.6 - Arbitrary Settings Update to Stored XSS via CSRF
2022-06-27 08:58:35
cve
cve
CVE-2022-1914
2022-06-27 09:15:10

EPSS

0.001

Percentile

25.9%

JSON
Related for WPVDB-ID:8C8DAD47-8591-47DC-B84F-8C5CB18B2D78
prion1patchstack1cnvd1wpexploit1nvd1cvelist1cve1