TI-2021-13648 CVE-2021-34634 · GHSA-qv96-733j-36x6Nifty Newsletters <= 4.0.23 - Cross-Site Request Forgery to Stored Cross-Site ScriptingPriority LOW 39The Nifty Newsletters WordPress plugin is vulnerable to Cross-Site Request Forgery via the sola_nl_wp_head function found in the ~/sola-newsletters.php file which allows attackers to inject arbitrary web scripts, in vers…CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.007 · Published 2021-08-05 · No fix listed CWE-352
