漏洞标题
"Exit Box Lite 插件 WordPress-exit-box-lite.php exitboxadmin 跨站请求伪造" 翻译成中文为:
漏洞描述信息
退出框Lite插件 wordpress-exit-box-lite.php exitboxadmin 跨站请求伪造
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
漏洞类别
跨站请求伪造(CSRF)
漏洞标题
Exit Box Lite Plugin wordpress-exit-box-lite.php exitboxadmin cross-site request forgery
漏洞描述信息
A vulnerability classified as problematic was found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this vulnerability is the function exitboxadmin of the file wordpress-exit-box-lite.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. Upgrading to version 1.10 is able to address this issue. The patch is named fad26701addb862c51baf85c6e3cc136aa79c309. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230671.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
漏洞类别
跨站请求伪造(CSRF)
漏洞标题
WordPress Plugin Exit Box Lite 跨站请求伪造漏洞
漏洞描述信息
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress Plugin Exit Box Lite 1.06及之前版本存在跨站请求伪造漏洞,该漏洞源于对函数exitboxadmin的操作导致跨站请求伪造。
CVSS信息
N/A
漏洞类别
跨站请求伪造