Description

The Limit Bio WordPress plugin through 1.0 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

INFO

Published Date :

2025-03-13T06:00:07.220Z

Last Modified :

2025-03-13T06:00:07.220Z

Source :

WPScan
AFFECTED PRODUCTS

The following products are affected by CVE-2025-1436 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-1436.

CVSS Vulnerability Scoring System