2 matches found
CVE-2024-54393 WordPress WP Fiddle plugin <= 1.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Sheikh Heera WP Fiddle allows Stored XSS.This issue affects WP Fiddle: from n/a through 1.0...
CVE-2024-54393
CVE-2024-54393 is documented as a Cross-Site Request Forgery (CSRF) vulnerability in the WP Fiddle WordPress plugin (WP-Fiddle). The affected range indicates WP Fiddle from n/a through version 1.0. The CVE also indicates Stored XSS is possible, implying CSRF could lead to XSS in the affected plug...