PT-2022-18636 · Unknown · Yoo Slider

Re-Alter + 1 · Published 2022-04-13 · Updated 2022-04-21 · CVE-2022-27847

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Yoo Slider versions prior to 2.0.1

Description A Cross-Site Request Forgery (CSRF) issue exists, allowing attackers to import templates.

Recommendations For Yoo Slider versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-27847

Affected Products

Yoo Slider

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-27847 · Security Note
• https://osv.dev/vulnerability/CVE-2022-27847 · Vendor Advisory
• https://patchstack.com/database/vulnerability/yoo-slider/wordpress-yoo-slider-plugin-2-0-0-cross-site-request-forgery-csrf-vulnerability-leading-to-template-import · Note
• https://wordpress.org/plugins/yoo-slider/#developers · Note