Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:bitcoin_satoshi_tools_:__faucets,_visitor_rewarder,_satoshi_games,_referral_program:*:*:*:*:*:*:*:*

part: a version: __faucets,_visitor_rewarder,_satoshi_games,_referral_program update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductBitcoin Satoshi Tools (92a485cf-0bf5-54e5-99ef-dd27f3dfd53b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3024 vulnerable 2026-06-08 05:47:19.059106 Simple Bitcoin Faucets <= 1.7.0 - Unauthorised AJAX Call to Stored XSS
The Simple Bitcoin Faucets WordPress plugin through 1.7.0 does not have any authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscribers to call it and add/delete/edit Bonds. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues
Published: 2022-09-26T00:00:00.000Z
Updated: 2025-05-22T14:26:26.193Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.