Description (CNA)
Cross-Site Scripting (XSS) vulnerability in KubiQ's PNG to JPG plugin <= 4.0 at WordPress via Cross-Site Request Forgery (CSRF). Vulnerable parameter &jpg_quality.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| KubiQ / PNG to JPG (WordPress plugin) | affected <= 4.0 through 4.0 |
CWE
CWE-352, CWE-79
References
- https://wordpress.org/plugins/png-to-jpg/#developers
- https://patchstack.com/database/vulnerability/png-to-jpg/wordpress-png-to-jpg-plugin-4-0-cross-site-request-forgery-csrf-leading-to-persistent-cross-site-scripting-xss-vulnerability
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.