mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-25 20:57:49 +02:00
793 B
793 B
CVE-2022-1422
Description
The Discy WordPress theme before 5.2 does not check for CSRF tokens in the AJAX action discy_reset_options, allowing an attacker to trick an admin into resetting the site settings back to defaults.