CVE-2022-35277

概要

参考情報

• patchstack.com/database/vulnerability/getresponse-integration/wordpress-getresponse-plugin-5-5-18-cross-site-request-forgery-csrf-vulnerability-leading-to-api-key-update/_s_id=cve · Third Party Advisory
• wordpress.org/plugins/getresponse-integration · Product

getresponse のその他の脆弱性

• CVE-2023-0167中 5.4The GetResponse for WordPress plugin through 5.5.31 does not validate and escape some of its shortcode attributes before outputting them bac…