CVE-2024-8092

Name of the Vulnerable Software and Affected Versions: Accordion Image Menu WordPress plugin versions 3.1.3 and earlier

Description: The issue is related to the lack of CSRF checks in some areas and missing sanitization as well as escaping. This could allow attackers to make logged-in admins add Stored XSS payloads via a CSRF attack.

Recommendations: For versions 3.1.3 and earlier, update to a version that includes proper CSRF checks and sanitization to prevent Stored XSS payloads from being added via a CSRF attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.