RSS   Podatności dla 'Compact wp audio player'   RSS

2021-10-18
 
CVE-2021-24734

CWE-79
 

 
The Compact WP Audio Player WordPress plugin before 1.9.7 does not escape some of its shortcodes attributes, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.

 
 
CVE-2021-24735

CWE-352
 

 
The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers to make a logged in admin change the "Disable Simultaneous Play" setting via a CSRF attack.

 

 >>> Vendor: Tipsandtricks-hq 12 Produkty
Wordpress simple paypal shopping cart
Simple download monitor
All in one wp security & firewall
Category specific rss feed subscription
Wp security \& firewall
Software license manager
Wp video lightbox
Compact wp audio player
Far future expiry header
All in one wp security \& firewall
Wp simple adsense insertion
Accept stripe


Copyright 2024, cxsecurity.com

 

Back to Top