Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xxrr-x8j4-g44v

Опубликовано: 11 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

EPSS

Процентиль: 4%
0.0002
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
3 месяца назад

The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

EPSS

Процентиль: 4%
0.0002
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352