CVE-2024-51649

Cross-Site Request Forgery CSRF vulnerability in Patrick Lumumba Mobilize mobilize allows Stored XSS.This issue affects Mobilize: from n/a through = 3.0.7...

CVE-2024-51649

The CVE CVE-2024-51649 affects the WordPress Mobilize plugin and describes a Cross-Site Request Forgery (CSRF) flaw that enables Stored XSS. Affected version range is Mobilize up to 3.0.7 (and earlier). The connected sources consistently state CSRF leading to stored XSS, but none of the documents...