Описание
The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which could allow attackers to make a logged in admin delete them via a CSRF attack
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.3.10 (исключая)
cpe:2.3:a:wow-company:modal_window:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 20%
0.00064
Низкий
5.9 Medium
CVSS3
Дефекты
CWE-352
Связанные уязвимости
CVSS3: 5.9
github
почти 2 года назад
The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which could allow attackers to make a logged in admin delete them via a CSRF attack
EPSS
Процентиль: 20%
0.00064
Низкий
5.9 Medium
CVSS3
Дефекты
CWE-352