Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cpc7-5gxx-6rf4

Опубликовано: 05 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor WordPress plugin before 3.4.2 does not have CSRF checks on some of its form actions such as deletion and duplication, which could allow attackers to make logged in admin perform such actions via CSRF attacks

The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor WordPress plugin before 3.4.2 does not have CSRF checks on some of its form actions such as deletion and duplication, which could allow attackers to make logged in admin perform such actions via CSRF attacks

EPSS

Процентиль: 32%
0.00125
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 6.5
nvd
около 2 лет назад

The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor WordPress plugin before 3.4.2 does not have CSRF checks on some of its form actions such as deletion and duplication, which could allow attackers to make logged in admin perform such actions via CSRF attacks

EPSS

Процентиль: 32%
0.00125
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-352