CVE-2023-44473

2023-10-0911:15:10

CWE-352

Patchstack

web.nvd.nist.gov

cve-2023-44473

cross-site request forgery

csrf

michael tran

table of contents plus

nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in Michael Tran Table of Contents Plus plugin <= 2302 versions.

Affected configurations

Nvd

Vulners

Node

dubluetable_of_contents_plusRange≤2302wordpress

VendorProductVersionCPE
dubluetable_of_contents_plus*cpe:2.3:a:dublue:table_of_contents_plus:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
dublue	table_of_contents_plus	*	cpe:2.3:a:dublue:table_of_contents_plus::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "table-of-contents-plus",
    "product": "Table of Contents Plus",
    "vendor": "Michael Tran",
    "versions": [
      {
        "changes": [
          {
            "at": "2309",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2302",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/table-of-contents-plus/wordpress-table-of-contents-plus-plugin-2302-cross-site-request-forgery-csrf-vulnerability?_s_id=cve