CVE-2021-42364

Published: 2021-11-29T19:15Z

Last Modified: 2024-11-21T06:27Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Stetic WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the stats_page function found in the ~/stetic.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 1.0.6. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt