CVE-2022-1787

Name of the Vulnerable Software and Affected Versions The Sideblog WordPress plugin through 6.0

Description The issue is related to the lack of a CSRF check when updating settings in the plugin, which could allow attackers to make a logged-in admin change them via a CSRF attack. This could lead to Stored Cross-Site Scripting due to the lack of sanitization and escaping.

Recommendations For The Sideblog WordPress plugin through 6.0, update to a version that includes a CSRF check and proper sanitization and escaping to prevent Stored Cross-Site Scripting. As a temporary workaround, consider restricting access to the settings update functionality to minimize the risk of exploitation.