Lucene search

K
cvelistPatchstackCVELIST:CVE-2023-23973
HistoryMar 01, 2023 - 12:49 p.m.

CVE-2023-23973 WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

2023-03-0112:49:28
CWE-352
Patchstack
www.cve.org
2
wordpress
contact us
csrf
vulnerability
plugin
csrf vulnerability

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

22.3%

Cross-Site Request Forgery (CSRF) vulnerability in a3rev Software Contact Us Page – Contact People plugin <= 3.7.0.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "contact-us-page-contact-people",
    "product": "Contact Us Page – Contact People",
    "vendor": "a3rev Software",
    "versions": [
      {
        "changes": [
          {
            "at": "3.7.1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.7.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

22.3%

Related for CVELIST:CVE-2023-23973