mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-12 09:21:42 +02:00
753 B
753 B
CVE-2022-1422
Description
The Discy WordPress theme before 5.2 does not check for CSRF tokens in the AJAX action discy_reset_options, allowing an attacker to trick an admin into resetting the site settings back to defaults.