Lucene search

K
cvePatchstackCVE-2024-30521
HistoryMar 29, 2024 - 4:15 p.m.

CVE-2024-30521

2024-03-2916:15:11
CWE-352
Patchstack
web.nvd.nist.gov
34
cve-2024-30521
landingi
landing pages
csrf
vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%

Cross-Site Request Forgery (CSRF) vulnerability in Landingi Landingi Landing Pages.This issue affects Landingi Landing Pages: from n/a through 3.1.1.

Affected configurations

Vulners
Node
landingilandingi_landing_pagesRange3.1.1wordpress
VendorProductVersionCPE
landingilandingi_landing_pages*cpe:2.3:a:landingi:landingi_landing_pages:*:*:*:*:*:wordpress:*:*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "landingi-landing-pages",
    "product": "Landingi Landing Pages",
    "vendor": "Landingi",
    "versions": [
      {
        "changes": [
          {
            "at": "3.1.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.1.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVE-2024-30521