21 matches found
WP Slimstat <= 4.8.3 - CSRF to Stored XSS and Setting Updates
Lack of CSRF check and sanitisation in the updatesettings function can lead to settings update, as well as Stored XSS issues /wp-admin/admin.php?page=slimconfig&tab=1" method="POST" ' /...