Lucene search
HistoryNov 22, 2023 - 6:15 p.m.
CVE-2023-47758
cross-site request forgery
mondula gmbh
multi step form
1.7.11
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.1%
Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form plugin <= 1.7.11 versions.
Affected configurations
Node
mondulamulti_step_formRange<1.7.11wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mondula | multi_step_form | * | cpe:2.3:a:mondula:multi_step_form:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
cve
cve
CVE-2023-47758
2023-11-22 18:15:09
wpvulndb
wpvulndb
Multi Step Form < 1.7.13 - Form Update/Deletion via CSRF
2023-11-29 00:00:00
prion
prion
Cross site request forgery (csrf)
2023-11-22 18:15:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.1%
Related for NVD:CVE-2023-47758