← CVE Intelligence

CVE-2021-25092

Link Library < 7.2.8 - Library Settings Reset via CSRF PUBLISHED

Description (CNA)

The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack

Affected (CNA)

Vendor / productVersions
Unknown / Link Libraryaffected 7.2.8 before 7.2.8

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.