CVE-2014-2838 | BDVDB-2026-67249 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct (1) SQL injection attacks via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php or (2) cross-site scripting (XSS) attacks via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://advisories.dxw.com/advisories/csrf-and-blind-sql-injection-in-gd-star-rating-1-9-22/
https://exchange.xforce.ibmcloud.com/vulnerabilities/92156
http://secunia.com/advisories/57667
http://seclists.org/fulldisclosure/2014/Mar/399

Exploit#

No public exploit known

History#

Version 12015-01-12Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.