CVE-2021-4418

The CVE-2021-4418 entry concerns the WordPress plugin “Custom CSS, JS & PHP” and CSRF vulnerability. According to the description, versions up to and including 2.0.7 are affected due to missing or incorrect nonce validation in the save() function, enabling unauthenticated attackers to save code s...