CVE-2021-36908: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WebFactory Ltd. WP Reset PRO plugin = 5.98 versions...

PT-2021-21401 · Webfactory · Wp Reset Pro

Name of the Vulnerable Software and Affected Versions: WebFactory Ltd. WP Reset PRO plugin versions = 5.98 Description: A Cross-Site Request Forgery CSRF issue affects the WebFactory Ltd. WP Reset PRO plugin. This type of issue allows an attacker to perform unintended actions on a user's behalf...

GHSA-754H-5R27-7X3R RCE in Symfony

Description ----------- The CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache class to handle requests. HttpCache uses internal headers like X-Body-Eval and X-Body-File to control the restoration of cached responses. The class was initially written with surroga...