Vulnerabilities > CVE-2022-1418 - Unspecified vulnerability in Pluginmirror Social Stickers

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
pluginmirror

Summary

The Social Stickers WordPress plugin through 2.2.9 does not have CSRF checks in place when updating its Social Network settings, and does not escape some of these fields, which could allow attackers to make a logged-in admin change them and lead to Stored Cross-Site Scripting issues.

Vulnerable Configurations

Part Description Count
Application
Pluginmirror
1