CVE-2021-24411

The Social Tape WordPress plugin through 1.0 does not have CSRF checks in place when saving its settings, and do not sanitise or escape them before outputting them back in the page, leading to a stored Cross-Site Scripting issue via a CSRF attack...

CVE-2021-24411 Social Tape <= 1.0 - CSRF to Stored XSS

The Social Tape WordPress plugin through 1.0 does not have CSRF checks in place when saving its settings, and do not sanitise or escape them before outputting them back in the page, leading to a stored Cross-Site Scripting issue via a CSRF attack...

CVE-2021-24411

CVE-2021-24411 affects the WordPress Social Tape plugin (versions up to 1.0). The vulnerability arises from missing CSRF checks when saving settings and lack of sanitization/escaping of those settings on output, leading to a stored XSS via a CSRF attack. Published details show an exploitable flow...