high8.8
CVE-2023-6391
The Custom User CSS WordPress plugin through 0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in …
Impact
The Custom User CSS WordPress plugin through 0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jeremiahorem | Custom User Css | through 0.2 |