Skip to content
OpenAdvisories

Product · flippercode

Custom css-js-php

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2021-4418

    Custom CSS, JS & PHP <= 2.0.7 - Cross-Site Request Forgery Bypass

    The Custom CSS, JS & PHP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.7. This is due to missing or incorrect nonce validation on the save() function. This makes it possible for unauthenticated attacker…

    flippercode Custom css-js-php Web / CMS