CVE-2025-52781 WordPress TinyNav plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Beee TinyNav tinynav allows Stored XSS.This issue affects TinyNav: from n/a through = 1.4...

CVE-2025-52781

CVE-2025-52781 describes a CSRF vulnerability in Beee TinyNav (TinyNav) that allows stored XSS. Affected: TinyNav versions n/a through 1.4. Root cause: Cross-Site Request Forgery enabling stored reflected XSS inside the plugin. Impact: stored XSS could be triggered by authenticated/unauthenticate...

WordPress TinyNav plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin TinyNav versions = 1.4...