CSRF and XSS Vulnerability in Content Copy Protection & Prevent Image Save WordPress Plugin

CVE-2021-24333 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers to make a logged in administrator set arbitrary XSS payloads in them.

Learn more about our Wordpress Pen Testing.