The Bitcoin / Altcoin Faucet WordPress plugin through 1.6.0 does not have any CSRF check when saving its settings, allowing attacker to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/66bc783b-67e1-4bd0-99c0-322873b3a22a | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
28 Sep 2022, 14:15
Type | Values Removed | Values Added |
---|---|---|
First Time |
Bitcoin\/altcoin Faucet Project
Bitcoin\/altcoin Faucet Project bitcoin\/altcoin Faucet |
|
CPE | cpe:2.3:a:bitcoin\/altcoin_faucet_project:bitcoin\/altcoin_faucet:*:*:*:*:*:wordpress:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
References | (MISC) https://wpscan.com/vulnerability/66bc783b-67e1-4bd0-99c0-322873b3a22a - Exploit, Third Party Advisory |
26 Sep 2022, 13:18
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-09-26 13:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-3025
Mitre link : CVE-2022-3025
CVE.ORG link : CVE-2022-3025
JSON object : View
Products Affected
bitcoin\/altcoin_faucet_project
- bitcoin\/altcoin_faucet