Archive
6 July 2021
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Unscored —
Easy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting
The Easy Cookies Policy WordPress plugin through 1.6.2 is lacking any capability and CSRF check when saving its settings, allowing any authenticated users (such as subscriber) to change them. If users can't register, this can be done through CSRF. Furthermore…