Логотип exploitDog
bind:CVE-2025-1382
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-1382

Количество 2

Количество 2

nvd логотип

CVE-2025-1382

11 месяцев назад

The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-3r92-3wmq-rmm2

11 месяцев назад

The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-1382

The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 6.1
0%
Низкий
11 месяцев назад
github логотип
GHSA-3r92-3wmq-rmm2

The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 6.1
0%
Низкий
11 месяцев назад

Уязвимостей на страницу