Vulnerabilities > CVE-2022-1557 - Unspecified vulnerability in Uleak-Security-Dashboard Project Uleak-Security-Dashboard 1.2.3
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
The ULeak Security & Monitoring WordPress plugin through 1.2.3 does not have authorisation and CSRF checks when updating its settings, and is also lacking sanitisation as well as escaping in some of them, which could allow any authenticated users such as subscriber to perform Stored Cross-Site Scripting attacks against admins viewing the settings
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |