mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-01 02:41:46 +02:00
835 B
835 B
CVE-2021-24674
Description
The Genie WP Favicon WordPress plugin through 0.5.2 does not have CSRF in place when updating the favicon, which could allow attackers to make a logged in admin change it via a CSRF attack
POC
Reference
- https://wpscan.com/vulnerability/26965878-c4c9-4f43-9e9a-6e58d6b46ef2
- https://wpscan.com/vulnerability/26965878-c4c9-4f43-9e9a-6e58d6b46ef2
Github
No PoCs found on GitHub currently.