Lucene search
PRIOn knowledge basePRION:CVE-2015-2039HistoryFeb 20, 2015 - 4:59 p.m.
Cross site request forgery (csrf)
2015-02-2016:59:00
PRIOn knowledge base
www.prio-n.com
1
Multiple cross-site request forgery (CSRF) vulnerabilities in the Acobot Live Chat & Contact Form plugin 2.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or (2) conduct cross-site scripting (XSS) attacks via the acobot_token parameter in the acobot page to wp-admin/options-general.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| acobot_live_chat_\\&_contact_form | eq | 2.0 |
Related
cve
cve
CVE-2015-2039
2015-02-20 16:59:08
cvelist
cvelist
CVE-2015-2039
2015-02-20 16:00:00
patchstack
patchstack
WordPress Acobot Live Chat & Contact Form Plugin <= 2.0 - Multiple CSRF
2015-02-20 00:00:00
nvd
nvd
CVE-2015-2039
2015-02-20 16:59:08
wpvulndb
wpvulndb
Acobot Live Chat & Contact Form <= 2.0 - CSRF/XSS
2015-02-22 00:00:00
kaspersky
kaspersky
KLA10491 Multiple vulnerabilities in WordPress plugins
2015-03-17 00:00:00