Pictobrowser Gallery Vulnerabilities

[en] Cross-site request forgery (CSRF) vulnerability in the PictoBrowser (pictobrowser-gallery) plugin 0.3.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the pictoBrowserFlickrUser parameter in the optio...

Affected:

up to 0.3.1

Fixed in:

0.3.1

Disclosed:

Dec 31, 2014

CVE-2014-9392 on NVD →

Cross-site request forgery (CSRF) vulnerability in the PictoBrowser (pictobrowser-gallery) plugin 0.3.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the pictoBrowserFlickrUser parameter in the options-pa...

CVSS:

6.1

Affected:

up to 0.3.1

Fix:

No patched version reported

Disclosed:

Dec 18, 2014

CVE-2014-9392 on NVD →