Описание
Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page while logging in, unintended operations may be performed.
Ссылки
- Third Party Advisory
- Product
- Product
- Third Party Advisory
- Product
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 3.4.31 (исключая)
cpe:2.3:a:ninjaforms:ninja_forms:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 41%
0.00191
Низкий
8.8 High
CVSS3
Дефекты
CWE-352
Связанные уязвимости
CVSS3: 8.8
github
почти 2 года назад
Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page while logging in, unintended operations may be performed.
EPSS
Процентиль: 41%
0.00191
Низкий
8.8 High
CVSS3
Дефекты
CWE-352