CVE-2023-25976

2023-05-2612:15:16

CWE-352

[email protected]

web.nvd.nist.gov

cve-2023-25976

cross-site request forgery

crm perks integration

contact form 7

zoho crm

bigin plugin

security vulnerability

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

27.7%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin <= 1.2.2 versions.

Affected configurations

Nvd

Node

crmperksintegration_for_contact_form_7_and_zoho_crm\,_biginRange≤1.2.2wordpress

VendorProductVersionCPE
crmperksintegration_for_contact_form_7_and_zoho_crm\,_bigin*cpe:2.3:a:crmperks:integration_for_contact_form_7_and_zoho_crm\,_bigin:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
crmperks	integration_for_contact_form_7_and_zoho_crm\,_bigin	*	cpe:2.3:a:crmperks:integration_for_contact_form_7_and_zoho_crm\,_bigin::::::wordpress::*

References

patchstack.com/database/vulnerability/cf7-zoho/wordpress-integration-for-contact-form-7-and-zoho-crm-bigin-plugin-1-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve