Description
EspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain text cookies over an insecure channel (HTTP). An attacker may capture the cookie from the insecure channel using MITM attack.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Coder-add custom html, css and js code Cross-Site Request Forgery (2.5.2)
WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.7)
WordPress 4.0.x Same Origin Method Execution (SOME) Vulnerability (4.0 - 4.0.10)
WordPress Plugin WORDPRESS VIDEO GALLERY SQL Injection (2.0)