~/products/sloth_logo_customizer_project/sloth_logo_customizer

pipeline liveDigest Docs

Sloth Logo Customizer Project Sloth Logo Customizer vulnerabilities

1 known vulnerability affecting sloth_logo_customizer_project/sloth_logo_customizer.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2023-0603P3HIGHCVSS 8.8≤ 2.0.22023-05-08

CVE-2023-0603 [HIGH] CWE-79 CVE-2023-0603: The Sloth Logo Customizer WordPress plugin through 2.0.2 does not have CSRF check when updating its The Sloth Logo Customizer WordPress plugin through 2.0.2 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

Sloth Logo Customizer Project Sloth Logo Customizer vulnerabilities | cvebase