CVE-2022-1757

CVE-2022-1757 affects the Pagebar WordPress plugin (versions prior to 2.70). The root cause is missing CSRF protection when updating settings, coupled with insufficient sanitization, enabling a logged-in admin change via CSRF and potentially stored XSS. Public docs indicate vulnerable settings up...