CVE-2022-1593

 

Published at: - 27-06-2022 11:15

Last modified: - 12-07-2022 09:15

Total changes: - 4

Description

The Site Offline or Coming Soon WordPress plugin through 1.6.6 does not have CSRF check in place when updating its settings, and it also lacking sanitisation as well as escaping in some of them. As a result, attackers could make a logged in admin change them and put Cross-Site Scripting payloads in them via a CSRF attack

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

 

Verification logic

 

Reference

• https://wpscan.com/vulnerability/67678666-402b-4010-ac56-7067a0f40185

 

Keywords

NVD

 

CVE-2022-1593

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures