MathJax-LaTeX, dc58a5e8913fe3e0530789dbb21e0998a8536ee4

CVE, Research URL: dc58a5e8913fe3e0530789dbb21e0998a8536ee4
Home page URL: Security reports for MathJax-LaTeX
Application: MathJax-LaTeX
Published on: Mar 25, 2013
Research Description: MathJax-LaTeX [mathjax-latex] < 1.2 MathJax-LaTeX < 1.2 - Cross-Site Request Forgery The MathJax LaTeX plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions before 1.2. This is due to missing or incorrect nonce validation on the mathjax_plugin_options function. This may make it possible for unauthenticated attackers to arbitrarily change plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 1.2.
Status: vulnerable