CVE-2024-7822

The Quick Code WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-7822: Improper Neutralization of Input During Web Page Generation

The Quick Code WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

PT-2024-38608

Name of the Vulnerable Software and Affected Versions The Quick Code WordPress plugin through 1.0 Description The issue is related to the lack of CSRF check in some places, and missing sanitisation as well as escaping in the Quick Code WordPress plugin. This could allow attackers to make logged-i...