CVE-2021-24410

creationtimestamp| type| source ---|---|--- 2021-08-16 14:14:39+00:00| seen| https://t.me/cibsecurity/27360...

CVE-2021-24410 Telugu Bible Verse Daily <= 1.0 - CSRF to Stored XSS

The తెలుగు బైబిల్ వచనములు WordPress plugin through 1.0 is lacking any CSRF check when saving its settings and verses, and do not sanitise or escape them when outputting them back in the page. This could allow attackers to make a logged in admin change the settings, as well as add malicious verses...

CVE-2021-24410

The CVE-2021-24410 entry corresponds to a CSRF vulnerability in the Telugu Bible Verse Daily WordPress plugin (version ≤ 1.0). Multiple connected sources confirm the issue: the plugin saves settings and verses without CSRF protection and fails to sanitize/escape output, enabling a logged-in admin...