Lucene search
+L

1 matches found

wpexploit
wpexploit
added 2020/12/15 12:00 a.m.825 views

Redux Framework < 4.1.21 - CSRF Nonce Validation Bypass

The plugin did not properly validate some nonces, only checking them if their value was set. As a result, CSRF attacks could still be performed by not submitting the nonce in the request, bypassing the protection they are supposed to provide. Just don't send the parameters: $POST'nonce' or...

0.7AI score
SaveExploits0References4
Rows per page
Query Builder