💣Exploit CVE-2024-3823 - The Base64 Encoder/Decoder WordPress plugin throug

[Maksim]

CVE ID : CVE-2024-3823
Published : May 15, 2024, 6:15 a.m. | 44 minutes ago
Description : The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.