exploitDog

CVE-2014-5196

Опубликовано: 12 авг. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in improved-user-search-in-backend.php in the backend in the Improved user search in backend plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that insert XSS sequences via the iusib_meta_fields parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:improved_user_search_in_backend_project:improved_user_search_in_backend:*:-:-:*:-:wordpress:*:*

Версия до 1.2.4 (включая)

EPSS

Процентиль: 66%

0.00526

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-wwf7-p72f-c86w

github

больше 3 лет назад

Cross-site request forgery (CSRF) vulnerability in improved-user-search-in-backend.php in the backend in the Improved user search in backend plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that insert XSS sequences via the iusib_meta_fields parameter.

EPSS

Процентиль: 66%

0.00526

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79