Fontsampler, c1e4aaff-e68d-4bb3-9f82-31c3a649b41b

CVE, Research URL: c1e4aaff-e68d-4bb3-9f82-31c3a649b41b
Home page URL: Security reports for Fontsampler
Application: Fontsampler
Published on: -
Research Description: Fontsampler [fontsampler] < 0.14.3 (closed) Fontsampler < 0.4.13 - CSRF to Authenticated Reflected Cross-Site Scripting (XSS) The plugin did not properly check for CSRF and authorisation in its ajax_get_mock_fontsampler AJAX action, which could lead to an authenticated reflected XSS issue as user input was then output without being sanitised first.
Affected versions: max 0.14.3.
Status: vulnerable