Lucene search
HistoryFeb 28, 2023 - 3:15 p.m.
CVE-2022-47612
cross-site request forgery
cve-2022-47612
roland barker
xnau webdesign
plugin
list column update
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
4.7 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
16.4%
Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database plugin <= 2.4.5 leads to list column update.
Affected configurations
Node
xnauparticipants_databaseRange<2.4.6wordpress
Related
cve
cve
CVE-2022-47612
2023-02-28 15:15:11
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2023-02-28 15:15:00
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
4.7 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
16.4%
Related for NVD:CVE-2022-47612