Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 06:26:36 +0000 CVE-2021-24218 — Facebook for WordPress 3.0.0-3.0.3 - CSRF to Stored XSS and Settings Deletion https://cve.radiocsirt.org/vuln/cve-2021-24218 <p><strong>Affected:</strong> Unknown Facebook for WordPress</p> <p>The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce protection. The settings in the saveFbeSettings function had no sanitization allowing for script tags to be saved.</p> <p><strong>Affected:</strong> Unknown Facebook for WordPress</p> <p>The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce protection. The settings in the saveFbeSettings function had no sanitization allowing for script tags to be saved.</p> https://cve.radiocsirt.org/vuln/cve-2021-24218