The Simple Quotation WordPress plugin through 1.3.2 does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes. As a result, attacker could make a logged in admin create or edit arbitrary quote, and put Cross-Site Scripting payloads in them
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2022-03-14T14:41:53

Updated: 2024-08-03T03:21:48.945Z

Reserved: 2022-01-07T00:00:00

Link: CVE-2022-22734

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-03-14T15:15:10.973

Modified: 2024-11-21T06:47:20.827

Link: CVE-2022-22734

cve-icon Redhat

No data.