Read Time:18 Second

The Five Star Business Profile and Schema WordPress plugin before 2.1.7 does not have any authorisation and CSRF in its bpfwp_welcome_add_contact_page and bpfwp_welcome_set_contact_information AJAX action, allowing any authenticated users, such as subscribers, to call them. Furthermore, due to the lack of sanitisation, it also lead to Stored Cross-Site Scripting issues

Read More

More Stories

rust-zincati-0.0.30-1.fc40

FEDORA-2025-43bcbb0795 Packages in this update: rust-zincati-0.0.30-1.fc40 Update description: New upstream release v0.0.30 see: https://github.com/coreos/zincati/releases/tag/v0.0.30 Read More