Description
The Limit Bio WordPress plugin through 1.0 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.
INFO
Published Date :
2025-03-13T06:00:07.220Z
Last Modified :
2025-03-13T06:00:07.220Z
Source :
WPScan
AFFECTED PRODUCTS
The following products are affected by CVE-2025-1436 vulnerability.
No data.
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-1436.