Name Directory, b63ef0c9-3f2f-47cf-98ab-9e82b07b1c9d

CVE, Research URL: b63ef0c9-3f2f-47cf-98ab-9e82b07b1c9d
Home page URL: Security reports for Name Directory
Application: Name Directory
Published on: -
Research Description: Name Directory [name-directory] < 1.25.5 Name Directory < 1.25.5 - Stored Cross-Site Scripting via CSRF The plugin does not have CSRF check when adding/editing names, and is also lacking sanitisation as well as escaping in some of the fields, which could allow attackers to make a logged in admin edit arbitrary names and put XSS payloads in them.
Affected versions: max 1.25.5.
Status: vulnerable