search

pixelgrade / comments-ratings

Easily add a rating system to your comments area and start displaying reviews from your visitors.
GNU General Public License v2.0
0 stars 0 forks source link

[2] XSS and CSRF Vulnerability via Patchstack #16

Open georgeolaru opened 1 year ago

georgeolaru commented 1 year ago

There seem to be another security issue, that might not be covered on #15

Resources providing further information on this vulnerability:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45654 https://wpscan.com/vulnerability/07c8c848-99c2-46af-9f98-1e5917c2c8c9

Ticket