CVE-2024-12282

CVE-2024-12282 concerns the WordPress连接微博 plugin (wp-connect) up to version 2.5.6. The issue is lack of CSRF protection in multiple locations, plus insufficient sanitisation/escaping, enabling a logged-in admin to store XSS payloads via CSRF. Impact per sources is stored Cross-Site Scripting affe...