Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88212
HistorySep 28, 2022 - 12:00 a.m.

WordPress 3D Tag Cloud Cross-Site Request Forgery Vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress 3D Tag Cloud 3.8 and earlier versions contain a cross-site request forgery vulnerability, which stems from the fact that the web application does not adequately verify that the request is from a trusted user. An attacker could exploit the vulnerability to launch a cross-site scripting attack.

CPENameOperatorVersion
wordpress 3d tag cloudle3.8

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Related for CNVD-2022-88212