CVE-2022-25609

概要

参考情報

• patchstack.com/database/vulnerability/yoo-slider/wordpress-yoo-slider-plugin-2-0-0-stored-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/yoo-slider · Product

yoo slider のその他の脆弱性

• CVE-2022-27847中 4.3Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to import templates.
• CVE-2022-27846中 4.3Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to create or modify slider.
• CVE-2022-25608中 5.4Cross-Site Request Forgery (CSRF) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers to trick authenticated use…