PNG to JPG <= 5.8 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
highCross-Site Scripting (XSS) vulnerability in KubiQ's PNG to JPG plugin <= 4.0 at WordPress via Cross-Site Request Forgery (CSRF). Vulnerable parameter &jpg_quality.
- CVSS:
- 8.8
- Affected:
- up to 4.0
- Fixed in:
- 4.1
- Disclosed:
- May 6, 2022