CVE-2021-24446CWE-352

Remove Footer Credit < 1.0.6 - CSRF to Stored Cross-Site Scripting

published February 14, 2022

CVSS
—
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

The Remove Footer Credit WordPress plugin before 1.0.6 does not have CSRF check in place when saving its settings, which could allow attacker to make logged in admins change them and lead to Stored XSS issue as well due to the lack of sanitisation

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00329 · 24.7th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-02-14T09:20Z
EPSS history
Timeline
  • 14 FEB 09:20Z
    Remove Footer Credit < 1.0.6 - CSRF to Stored Cross-Site Scripting
    cvelistv5