Vulners
Lucene search
2 matches found
CVE-2021-24467
The Leaflet Map WordPress plugin before 3.0.0 does not verify the CSRF nonce when saving its settings, which allows attackers to make a logged in admin update the settings via a Cross-Site Request Forgery attack. This could lead to Cross-Site Scripting issues by either changing the URL of the...
6.5CVSS6.6AI score0.00103EPSS
Exploits2References1
Cross site request forgery (csrf)
The Leaflet Map WordPress plugin before 3.0.0 does not verify the CSRF nonce when saving its settings, which allows attackers to make a logged in admin update the settings via a Cross-Site Request Forgery attack. This could lead to Cross-Site Scripting issues by either changing the URL of the...
4.3CVSS6.2AI score0.00103EPSS
Exploits2References1Affected Software1
20