Lucene search

K
cvelistPatchstackCVELIST:CVE-2023-5803
HistoryNov 30, 2023 - 3:57 p.m.

CVE-2023-5803 WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)

2023-11-3015:57:05
CWE-352
Patchstack
www.cve.org
cve-2023-5803
cross site request forgery
business directory plugin

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.2%

Cross-Site Request Forgery (CSRF) vulnerability in Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress allows Cross-Site Request Forgery.This issue affects Business Directory Plugin – Easy Listing Directories for WordPress: from n/a through 6.3.10.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "business-directory-plugin",
    "product": "Business Directory Plugin – Easy Listing Directories for WordPress",
    "vendor": "Business Directory Team",
    "versions": [
      {
        "lessThanOrEqual": "6.3.10",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.2%

Related for CVELIST:CVE-2023-5803