CVE-2024-6712

The MapFig Studio WordPress plugin (versions 0.2.1 and earlier ) is vulnerable to Stored XSS via a CSRF attack . The root cause is a lack of CSRF checks , along with missing sanitization and escaping in certain areas of the plugin. This allows an attacker to trick a logged-in administrator into a...