Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Rb Internal Links Project Component: Rb Internal Links Clear all filters
TI-2022-01625 CVE-2022-1759 · GHSA-rw3h-jv5m-c76j

RB Internal Links <= 2.0.16 - Stored Cross-Site Scripting via CSRF

Priority LOW 24

The RB Internal Links WordPress plugin through 2.0.16 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, as well as perform…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00309 Published 2022-06-13 No fix listed CWE-352