Keap Official Opt-in Forms <= 1.0.11 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example, in multisite setup. PoC 1. Store the script in...

CVE-2023-44241

Cross-Site Request Forgery CSRF vulnerability in Keap Keap Landing Pages plugin = 1.4.2 versions...

CVE-2023-44241

Cross-Site Request Forgery CSRF vulnerability in Keap Keap Landing Pages plugin = 1.4.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Keap Keap Landing Pages plugin = 1.4.2 versions...

CVE-2023-44241 WordPress Keap Landing Pages Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Keap Keap Landing Pages plugin = 1.4.2 versions...

CVE-2023-44241 WordPress Keap Landing Pages Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Keap Keap Landing Pages plugin = 1.4.2 versions...

CVE-2023-44241

CVE-2023-44241 — Keap Landing Pages (WordPress) CSRF . Affected software is the Keap Landing Pages plugin (WordPress) version

WordPress Keap Landing Pages Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Keap Landing Pages Type Plugin Vulnerable versions = 1.4.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44241 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0f85172ed449 Credits Nguyen Xuan Chien...