Lucene search
HistoryNov 09, 2023 - 8:15 p.m.
CVE-2023-34033
cross-site request forgery
csrf
malinky ajax pagination
infinite scroll
vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.1%
Cross-Site Request Forgery (CSRF) vulnerability in Malinky Ajax Pagination and Infinite Scroll plugin <= 2.0.1 versions.
Affected configurations
Node
malinkymalinky-ajax-paginationRange≤2.0.1wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| malinky | malinky-ajax-pagination | * | cpe:2.3:a:malinky:malinky-ajax-pagination:*:*:*:*:*:wordpress:*:* |
Related
cve
cve
CVE-2023-34033
2023-11-09 20:15:08
vulnrichment
vulnrichment
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2023-11-09 20:15:00
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.1%
Related for NVD:CVE-2023-34033