Skip to content
OpenAdvisories

Vendor

jkriddle

2 known vulnerabilities.

Products

asset-manager 1 Banner Cycler 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2022-2233

    Banner Cycler <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting

    The Banner Cycler plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the pabc_admin_slides_postback() function found in the ~/admin/admin.php file. This makes it po…

    jkriddle Banner Cycler Web / CMS