Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g5j9-cp6r-48pp

Опубликовано: 17 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf

The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf

EPSS

Процентиль: 27%
0.00097
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
больше 3 лет назад

The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf

EPSS

Процентиль: 27%
0.00097
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352