CVE-2013-2709 FourSquare Checkins < 1.3 - Cross-Site Request Forgery to Cross-Site Scripting
MediumCVSS 6.8
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the FourSquare Checkins plugin before 1.3 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| crunchify foursquare-checkins | <= 1.2 | No fix listed |
| crunchify foursquare-checkins | = 1.0 | No fix listed |
| crunchify foursquare-checkins | = 1.1 | No fix listed |
| wordpress foursquare-checkins(WordPress) | < 1.3 | 1.3 |
References
- 53151 third-party-advisory vendor-advisory
- wordpress.org
- Wordfence Intelligence third-party-advisory
- www.cve.org