Read the docs

Cross-linker Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Cross-linker Project records in CISA KEV

No Cross-linker Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cross-linker 1 record LOW

Records

1 record in Cross-linker · all components

TI-2022-01692 CVE-2022-1826 · GHSA-6hcf-hc4g-6xwc

Cross-Linker <= 3.0.1.9 - Arbitrary Cross-Link Creation via CSRF

Priority LOW 30

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00534 Published 2022-06-20 No fix listed CWE-352
Open these records in search →