Skip to content
OpenAdvisories
Unscored CVE-2022-1826 EUVD-2022-25102GHSA-6hcf-hc4g-6xwc

Cross-Linker <= 3.0.1.9 - Arbitrary Cross-Link Creation via CSRF

Published Jun 20, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack

Affected products

VendorProductAffectedFixed
— Cross-Linker 3.0.1.9 – ≤ 3.0.1.9 —

References