TI-2024-36506 CVE-2024-54420 · GHSA-v267-h3hm-27xjWordPress Metrika plugin <= 1.2 - CSRF to Stored XSS vulnerabilityPriority LOW 31Cross-Site Request Forgery (CSRF) vulnerability in Aleksandr Novikov Metrika metrika allows Cross Site Request Forgery.This issue affects Metrika: from n/a through <= 1.2.CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00215 · Published 2024-12-16 · No fix listed CWE-352