CVE-2022-33201

概要

参考情報

• patchstack.com/database/vulnerability/official-mailerlite-sign-up-forms/wordpress-mailerlite-signup-forms-official-plugin-1-5-7-cross-site-request-forgery-csrf-vulnerability · Patch
• wordpress.org/plugins/official-mailerlite-sign-up-forms · Release Notes

mailerlite signup forms のその他の脆弱性

• CVE-2022-1604中 6.1The MailerLite WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Re…