KUNO 代码问题漏洞

KUNO is a blogging application by the individual developer XueMian ICT.RUN. A code issue vulnerability exists in KUNO versions prior to 1.3.15, which stems from the media module allowing the upload of specially crafted SVG files, which could lead to a server-side request forgery attack...

CVE-2024-9450

The Free Booking Plugin for Hotels, Restaurants and Car Rentals (also referred to as eaSYNC ) for WordPress is vulnerable to a Cross-Site Request Forgery (CSRF) attack in versions prior to 1.3.15 . The root cause is a missing CSRF check when updating plugin settings. An attacker could trick a log...