CVE-2022-3247
Assigner: WPScan
Published: 2022-10-25T00:00:00
State: PUBLISHED
title: Blog2Social < 6.9.10 - Subscriber+ SSRF
descriptions: value: The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not have authorisation in an AJAX action, and does not ensure that the URL to make a request to is an external one. As a result, any authenticated users, such as subscriber could perform SSRF attacks
affected: vendor: Unknown
product: Blog2Social: Social Media Auto Post & Scheduler
versions: version: 6.9.10
status: affected
lessThan: 6.9.10
versionType: custom
credits: value: Sakri Rafael Koskimies
problemTypes: descriptions: type: CWE
description: CWE-918 Server-Side Request Forgery (SSRF)
cweId: CWE-918
x_generator: WPScan CVE Generator
source: discovery: EXTERNAL