Description
Cross-Site Request Forgery (CSRF) vulnerability in Vinoj Cardoza 3D Tag Cloud allows Stored XSS.This issue affects 3D Tag Cloud: from n/a through 3.8.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Vinoj Cardoza | 3D Tag Cloud | ≤ 3.8 | — |
High · 7.1
CVE-2022-41990
EUVD-2022-45094GHSA-hq6w-4g59-2fr8
WordPress 3D Tag Cloud Plugin <= 3.8 is vulnerable to Cross Site Request Forgery (CSRF)
Published Jan 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack