admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-1572.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

869 B
Raw Blame History

CVE-2022-1572

Description

The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks in an AJAX action, available to any authenticated users such as subscriber, which could allow them to delete arbitrary file

POC

Reference

Github