The Subversion log entry for a recent revision of the plugin Zoho SalesIQ is “added security bug fix”. Looking at the changes made in that version we found that a cross-site request forgery (CSRF)/cross-site scripting (XSS) vulnerability had been fixed.

…

[Read more]