CVE-2022-0875
EUVD-2022-1591327.06.2022, 09:15
The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as escape them, allowing attackers to make a logged in admin change them and perform Cross-Site Scripting attacks
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| miniorange | google_authenticator | 𝑥 < 1.0.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration