CVE-2013-6797 in Blue Wrench Video Widget
Summary
Cross-site request forgery (CSRF) vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin before 2.0.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that embed arbitrary URLs via the bw_url parameter in the bw-videos page to wp-admin/admin.php, as demonstrated by embedding a URL to a JavaScript file.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
11/15/2013
Disclosure
11/18/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65496 | Sunil Nanda Blue Wrench Video Widget bluewrench-video-widget.php cross-site request forgery | 352 | Proof-of-Concept | Official fix | CVE-2013-6797 |