CVE-2012-4921

MEDIUM · 6.8 CVSS Gepubliceerd: 10-04-2014 CWE-352

Beschrijving

Multiple cross-site request forgery (CSRF) vulnerabilities in the DVS Custom Notification plugin 1.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change application settings or (2) conduct cross-site scripting (XSS) attacks.

Vendors

Dvs Custom Notification Project

Affected products

Dvs Custom Notification

References

osvdb.org
secunia.com