CVE-2023-3510

CVE-2023-3510 concerns the FTP Access WordPress plugin (versions ≤ 1.0). The vulnerability arises from missing authorization checks, CSRF protection, and sanitation/escaping in the plugin settings update flow, enabling an authenticated user (e.g., a Subscriber) to inject XSS that triggers when an...