CVE-2023-0603 in Sloth Logo Customizer Plugin정보

요약

\~에 의해 MITRE • 2023. 05. 08.

The Sloth Logo Customizer WordPress plugin through 2.0.2 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2023. 01. 31.

공개

2023. 05. 08.

모더레이션

수락

항목

VDB-228215

CPE

준비됨

CWE

CWE-79 (확인됨)

CVSS

8.8 (NVD)

EPSS

0.13871

KEV

아니요

활동

매우 낮음

부문

Hostingprovider

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2023-0603
NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-0603
CVE Details	https://www.cvedetails.com/cve/CVE-2023-0603/

◂ 이전 개요 다음 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!