Lucene search

[email protected]NVD:CVE-2023-37985

HistoryJul 17, 2023 - 4:15 p.m.

CVE-2023-37985

2023-07-1716:15:10

CWE-352

[email protected]

web.nvd.nist.gov

cve-2023-37985

cross-site request forgery

fivestarplugins restaurant menu

food ordering plugin

version 2.4.6

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

28.3%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in FiveStarPlugins Restaurant Menu and Food Ordering plugin <= 2.4.6 versions.

Affected configurations

Nvd

Node

fivestarpluginsfive_star_restaurant_menuRange<2.4.7wordpress

VendorProductVersionCPE
fivestarpluginsfive_star_restaurant_menu*cpe:2.3:a:fivestarplugins:five_star_restaurant_menu:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
fivestarplugins	five_star_restaurant_menu	*	cpe:2.3:a:fivestarplugins:five_star_restaurant_menu::::::wordpress::*

References

patchstack.com/database/vulnerability/food-and-drink-menu/wordpress-restaurant-menu-and-food-ordering-by-five-star-plugins-plugin-2-4-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

28.3%

JSON

Related for NVD:CVE-2023-37985

cve1 vulnrichment1 prion1 cvelist1 wpvulndb1 wordfence1