WordPress.MapSVG.Lite.mapsvg_data.CSRF
Description
This indicates an attack attempt against a Cross-Site Request-Forgery vulnerability in WordPress MapSVG Lite.
The vulnerability is due to insufficient sanitization of user supplied inputs in the application. An attacker may exploit this to cause the server to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application.
Affected Products
WordPress MapSVG Lite prior to 3.2.3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Upgrade to the latest version available from the website.
https://en-gb.wordpress.org/plugins/mapsvg-lite-interactive-vector-maps/
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |