Lucene search
HistoryAug 15, 2024 - 8:15 a.m.
CVE-2024-43275
cve-2024-43275
cross-site request forgery
xyzscripts
insert php code snippet
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.8%
Cross-Site Request Forgery (CSRF) vulnerability in xyzscripts.Com Insert PHP Code Snippet.This issue affects Insert PHP Code Snippet: from n/a through 1.3.6.
Affected configurations
Node
xyzscriptsinsert_php_code_snippetRange<1.3.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| xyzscripts | insert_php_code_snippet | * | cpe:2.3:a:xyzscripts:insert_php_code_snippet:*:*:*:*:*:*:*:* |
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.8%
Related for NVD:CVE-2024-43275