CCTV Smart Systems Twitter

This Months Best Cought On CCTV

Shared The Most

Violent crime soars by 18 per cent as warnings raised on falling police numbers

50 amazing gifts that women actually want

NASA Updates TV Coverage for First Crew Rotation Flight on US Commercial Spacecraft

Persistent XSS via CSRF in WP Meta and Date Remover

Persistent XSS via CSRF in WP Meta and Date Remover

During regular research audits for our Sucuri Firewall (WAF), we discovered a Cross Site Request Forgery (CSRF) leading to a persistent Cross Site Scripting vulnerability affecting 70,000+ users of the WP Meta and Date Remover plugin for WordPress.

Disclosure / Response Timeline:

  • April 30 – Initial contact attempt
  • May 07 – Patch is live

Are You at Risk?

This vulnerability requires some level of social engineering to be exploited.

Continue reading Persistent XSS via CSRF in WP Meta and Date Remover at Sucuri Blog.



from Sucuri Blog https://blog.sucuri.net/2019/05/persistent-xss-via-csrf-in-wp-meta-and-date-remover.html
via Security Installers

Comments

CCTV Installations