2code Ask Me
2 CVEs affecting 2code Ask Me. Latest disclosed: 2022-06-08. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1424 | Medium | 6.5 | 2022-06-08 | The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker to trick logged in users to perform vari… |
CVE-2022-1241 | Medium | 6.1 | 2022-06-08 | The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile page, leading to Reflected Cross-Site S… |