Cross-site request forgery (CSRF) vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin before 2.0.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that embed arbitrary URLs via the bw_url parameter in the bw-videos page to wp-admin/admin.php, as demonstrated by embedding a URL to a JavaScript file.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2013-11-15T20:00:00Z

Updated: 2024-09-16T18:49:22.943Z

Reserved: 2013-11-15T00:00:00Z

Link: CVE-2013-6797

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-11-19T04:50:57.393

Modified: 2024-11-21T01:59:43.380

Link: CVE-2013-6797

cve-icon Redhat

No data.