VYPR
Unrated severityNVD Advisory· Published Feb 1, 2022· Updated Aug 3, 2024

Link Library < 7.2.8 - Library Settings Reset via CSRF

CVE-2021-25092

Description

The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.