Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wwjm-ww5x-84hm

Опубликовано: 02 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which could allow attackers to make a logged in admin delete them via a CSRF attack

The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which could allow attackers to make a logged in admin delete them via a CSRF attack

EPSS

Процентиль: 20%
0.00064
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 5.9
nvd
почти 2 года назад

The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which could allow attackers to make a logged in admin delete them via a CSRF attack

EPSS

Процентиль: 20%
0.00064
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-352