Cross site scripting

The postTabs WordPress plugin through 2.10.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, which also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping...

PT-2022-14110

Name of the Vulnerable Software and Affected Versions postTabs WordPress plugin versions 2.10.6 and earlier Description The issue is related to the lack of a CSRF check when updating settings in the postTabs WordPress plugin, which could allow attackers to make a logged-in admin change them via a...