Vulnerability Details: Cross-Site Request Forgery (CSRF)/Cross-Site Scripting (XSS) Vulnerability in Simba Plugins Manager

https://www.pluginvulnerabilities.com/2017/08/11/vulnerability-details-cross-site-request-forgery-csrfcross-site-scripting-xss-vulnerability-in-simba-plugins-manager/

From time to time a vulnerability is fixed in a plugin without the discoverer putting out a report on the vulnerability and we will put out a post detailing the vulnerability so that we can provide our customers with more complete information on the vulnerability.

One of the changelog entries for version 1.6.17 of Simba Plugins Manager is:

SECURITY: Various

Source: Security Feed