exploitDog

CVE-2024-43338

Опубликовано: 19 нояб. 2024

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

Cross-Site Request Forgery (CSRF) vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls, Surveys & more allows Cross Site Request Forgery.This issue affects Crowdsignal Dashboard – Polls, Surveys & more: from n/a through 3.1.2.

Ссылки

https://patchstack.com/database/vulnerability/polldaddy/wordpress-crowdsignal-polls-ratings-plugin-3-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

EPSS

Процентиль: 37%

0.00159

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

GHSA-xgfv-v34v-46vm

CVSS3: 4.3

github

около 1 года назад

Cross-Site Request Forgery (CSRF) vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls, Surveys & more allows Cross Site Request Forgery.This issue affects Crowdsignal Dashboard – Polls, Surveys & more: from n/a through 3.1.2.

EPSS

Процентиль: 37%

0.00159

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352