← CVE Intelligence

CVE-2022-0875

miniOrange Google Authenticator < 1.0.5 - CSRF to Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as escape them, allowing attackers to make a logged in admin change them and perform Cross-Site Scripting attacks

Affected (CNA)

Vendor / productVersions
Unknown / Google Authenticatoraffected 1.0.5 before 1.0.5

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.