CVE-2021-24913
EUVD-2021-1182528.02.2022, 09:15
The Logo Showcase with Slick Slider WordPress plugin before 2.0.1 does not have CSRF check in the lswss_save_attachment_data AJAX action, allowing attackers to make a logged in high privilege user, change title, description, alt text, and URL of arbitrary uploaded media.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| infornweb | logo_showcase_with_slick_slider | 𝑥 < 2.0.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration