Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-529g-gxp3-7xg6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.

A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.

EPSS

Процентиль: 56%
0.00339
Низкий

Связанные уязвимости

CVSS3: 8.8
nvd
больше 5 лет назад

A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.

EPSS

Процентиль: 56%
0.00339
Низкий