CVE-2024-3903

The Add Custom CSS and JS WordPress plugin (versions 1.20 and earlier ) is vulnerable to a Stored XSS attack via Cross-Site Request Forgery (CSRF) . The root cause is a lack of CSRF checks in specific areas, combined with missing sanitization and escaping of inputs. An unauthenticated attacker co...