Skip to content
OpenAdvisories
Unscored CVE-2013-2704 EUVD-2013-2643GHSA-jrxv-q9r4-5w75

Cross-site request forgery (CSRF) vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack th…

Published Jul 12, 2013 · Updated Sep 16, 2024 · Assigned by flexera

Description

Cross-site request forgery (CSRF) vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences.

References