CVE-2017-20053

Опубликовано: 16 июн. 2022

Источник: nvd

CVSS3: 4.3

CVSS2: 4.3

EPSS Низкий

Описание

A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Ссылки

http://seclists.org/fulldisclosure/2017/Feb/99
Exploit
Mailing List
Third Party Advisory
https://sumofpwn.nl/advisory/2016/cross_site_request_forgery___cross_site_scripting_in_contact_form_manager_wordpress_plugin.html
Exploit
Third Party Advisory
https://vuldb.com/?id.97387
Third Party Advisory
http://seclists.org/fulldisclosure/2017/Feb/99
Exploit
Mailing List
Third Party Advisory
https://sumofpwn.nl/advisory/2016/cross_site_request_forgery___cross_site_scripting_in_contact_form_manager_wordpress_plugin.html
Exploit
Third Party Advisory
https://vuldb.com/?id.97387
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:xyzscripts:contact_form_manager:*:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 32%

0.00125

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-vpmc-j5g3-84g8

CVSS3: 4.3

github

больше 3 лет назад

EPSS

Процентиль: 32%

0.00125

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352