Search in Place by CodePeople

Search in Place by CodePeople <= 1.0.104 - CSRF

LANACOMMONVDB ID: afa9a61e-4f37-420e-b3b3-c734e99988c9

The plugin does not have Cross-Site Request Forgery (CSRF) check when submitting feedback, which could allow attackers to make logged in users do such action on their behalf via a Cross-Site Request Forgery (CSRF) attack.

You must be log in to view vulnerability details.

Or register a new account.

References

Source Code: https://wordpress.org/plugins/search-in-place/

CVE: CVE-2023-26521

Attributes

Catgory: WordPress Plugin

Discovered: 2022-10-14

Published: 2023-02-28

Affected Version: <= 1.0.104

Classification

Type: Cross-Site Request Forgery (CSRF)

Researcher

Name: István Márton

Email: [email protected]

Support Us?

We would truly appreciate it if you bought us a bunny (food for a snow leopard).