WordPress NewsPlugin plugin <= 1.0.18 – Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)
Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS discovered by Taichi Ichimura Cryptography Laboratory - Tokyo Denki University in WordPress NewsPlugin plugin versions = 1.0.18. Solution Update the WordPress NewsPlugin plugin to the latest available version...