Files
CVEs-PoC/2022/CVE-2022-2555.md
T
2024-05-25 21:48:12 +02:00

810 B

CVE-2022-2555

Description

The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack.

POC

Reference

Github