Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9r44-5846-qwc7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A cross-site request forgery (CSRF) vulnerability in the My SMTP Contact v1.1.1 plugin for GetSimple CMS allows remote attackers to change the SMTP settings of the contact forms for the webpages of the CMS after an authenticated admin visits a malicious third-party site.

A cross-site request forgery (CSRF) vulnerability in the My SMTP Contact v1.1.1 plugin for GetSimple CMS allows remote attackers to change the SMTP settings of the contact forms for the webpages of the CMS after an authenticated admin visits a malicious third-party site.

EPSS

Процентиль: 30%
0.00108
Низкий

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 6.5
nvd
больше 4 лет назад

A cross-site request forgery (CSRF) vulnerability in the My SMTP Contact v1.1.1 plugin for GetSimple CMS allows remote attackers to change the SMTP settings of the contact forms for the webpages of the CMS after an authenticated admin visits a malicious third-party site.

EPSS

Процентиль: 30%
0.00108
Низкий

Дефекты

CWE-352