CVE-2023-6499 | BDVDB-2026-224291 Detail

Description#

The lasTunes WordPress plugin through 3.6.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-02-12Record published in the CVE List.
2. Version 22025-05-06Most recent update recorded in the CVE List.