CVE-2022-29437

概要

参考情報

• patchstack.com/database/vulnerability/baslider/wordpress-image-slider-by-nextcode-plugin-1-1-2-multiple-cross-site-request-forgery-csrf-vulnerabilities · Third Party Advisory
• wordpress.org/plugins/baslider · Product

image slider by nextcode のその他の脆弱性

• CVE-2022-29439中 4.3Cross-Site Request Forgery (CSRF) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress allows deleting slides.
• CVE-2022-29438中 4.8Authenticated (author or higher user role) Persistent Cross-Site Scripting (XSS) vulnerability in Image Slider by NextCode plugin <= 1.1.2 a…