CVE-2024-0858: Innovs Hr: siteler arası istek sahteciliği (CSRF)

Açıklama (NVD)

The Innovs HR WordPress plugin before 1.0.3.7.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as adding them as employees.

Özet bilgiler

Ürün

Theinnovs Innovs Hr

CVSS v3.1

8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

%0,37 (yüzdelik 31)

CWE

CWE-352

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• wpscan.com
• wpscan.com
• CWE-352