Redux Framework, 5d52b68f-faca-4572-bb84-ecb733eecbe7
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Redux Framework [redux-framework] < 4.1.21 Redux Framework < 4.1.21 - CSRF Nonce Validation Bypass The plugin did not properly validate some nonces, only checking them if their value was set. As a result, CSRF attacks could still be performed by not submitting the nonce in the request, bypassing the protection they are supposed to provide.
- Affected versions
-
max 4.1.21.
- Status
-
vulnerable