Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2gv2-q542-493m

Опубликовано: 11 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 4.3

Описание

Easy Twitter Feeds before 1.2.13 contains a cross-site request forgery vulnerability in the duplicate_post action handler that lacks nonce verification. Attackers can trick an authenticated user into visiting a crafted link that duplicates any post regardless of post type.

Easy Twitter Feeds before 1.2.13 contains a cross-site request forgery vulnerability in the duplicate_post action handler that lacks nonce verification. Attackers can trick an authenticated user into visiting a crafted link that duplicates any post regardless of post type.

EPSS

Процентиль: 1%
0.00104
Низкий

5.1 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
около 2 месяцев назад

Easy Twitter Feeds before 1.2.13 contains a cross-site request forgery vulnerability in the duplicate_post action handler that lacks nonce verification. Attackers can trick an authenticated user into visiting a crafted link that duplicates any post regardless of post type.

EPSS

Процентиль: 1%
0.00104
Низкий

5.1 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-352