Cross site request forgery (csrf)

2019-09-2604:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

The avenirsoft-directdownload plugin 1.0 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=avenir_plugin.

CPENameOperatorVersion
directdownloadeq1.0

CPE	Name	Operator	Version
	directdownload	eq	1.0

References

packetstormsecurity.com/files/132992/

wordpress.org/plugins/avenirsoft-directdownload/