Wolfgang Häfelinger Custom Style Cross-Site Request Forgery Vulnerability Allowing Stored Cross-Site Scripting

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Wolfgang Häfelinger Custom Style plugin for WordPress, specifically in versions from n/a through 1.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks.

Impact

Exploitation of this vulnerability allows for Cross-Site Request Forgery, which can lead to Stored Cross-Site Scripting. This means that an attacker could trick a user into performing actions that result in the injection of malicious scripts, which are then stored and executed in the context of the user.