TI-2023-05867 CVE-2023-6391 · GHSA-7fpg-4q3m-78rqCustom User CSS <= 0.2 - Settings Update via CSRFPriority HIGH 73The Custom User CSS WordPress plugin through 0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00349 · Published 2024-01-29 · No fix listed CWE-352
