← CVE Intelligence

CVE-2022-0541

Flo Launch < 2.4.1 - Missing Authentication Allow Full Site Takeover PUBLISHED

Description (CNA)

The flo-launch WordPress plugin before 2.4.1 injects code into wp-config.php when creating a cloned site, allowing any attacker to initiate a new site install by setting the flo_custom_table_prefix cookie to an arbitrary value.

Affected (CNA)

Vendor / productVersions
Unknown / flo-launchaffected 2.4.1 before 2.4.1

CWE

CWE-284

References

ADP enrichment

CVE

No English description supplied.