cleantalk
Vulnerabilities and Security Researches

Redux Framework, 5d52b68f-faca-4572-bb84-ecb733eecbe7

Application

Redux Framework

Published on
-
Research Description
Redux Framework [redux-framework] < 4.1.21 Redux Framework &lt; 4.1.21 - CSRF Nonce Validation Bypass The plugin did not properly validate some nonces, only checking them if their value was set. As a result, CSRF attacks could still be performed by not submitting the nonce in the request, bypassing the protection they are supposed to provide.
Affected versions
max 4.1.21.
Status
vulnerable