Security Advisory

CVE-2021-24333

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-01 11:33:31

Last updated 2024-08-03 19:28:23

Assigner WPScan

State PUBLISHED

Description

The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers to make a logged in administrator set arbitrary XSS payloads in them.

← Browse all CVEs View on cve.org ↗