Lucene search

K
nvd[email protected]NVD:CVE-2024-0858
HistoryMar 18, 2024 - 7:15 p.m.

CVE-2024-0858

2024-03-1819:15:06
web.nvd.nist.gov
3
innovs hr
wordpress
csrf
attacks
employees

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

The Innovs HR WordPress plugin through 1.0.3.4 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as adding them as employees.

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-0858