CVE-2024-3903

7.1HIGH

The Add Custom CSS and JS WordPress plugin through 1.20 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in as autho

게시됨: 5/14/2024업데이트됨: 5/14/2025
NVD에서 보기MITRE에서 보기

설명

The Add Custom CSS and JS WordPress plugin through 1.20 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in as author and above add Stored XSS payloads via a CSRF attack

AI 분석AI 기반

영향받는 제품

technologicxadd_custom_css_and_js

참조