2 CVEs in 1 Mm-Breaking News Project product, including Mm-Breaking News. Newest: CVE-2024-8056 (2024-09-12). Severity, EPSS and public exploits for each.
The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which coul…
The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow…