CVE-2021-24890

The CVE-2021-24890 entry concerns the WordPress Scripts Organizer plugin (pre-3.0). The vulnerability is due to missing capability/CSRF checks in the saveScript AJAX action and lack of input validation, making it possible for unauthenticated users to upload arbitrary PHP code via the affected end...