CVE-2024-6224

The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

Anghami: [CRITICAL] Login To Any Account Linked With Google+ With Email Only

Hello, This is CRITICAL .. I Can Login To Any Account Linked With Google+ With Email Only And Without Password!! PoC: html And To Make This PoC Work .. You Have To Follow The Same Bypass in My Previous Report 86428. If Your Page URL is http://localhost/login.html Make IT Look Like...