CVE-2024-12282

The WordPress连接微博 (wp-connect) plugin, versions 2.5.6 and earlier , is vulnerable to Stored Cross-Site Scripting (XSS) via a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks in certain areas, combined with insufficient sanitization and escaping of input data. This...