Cross site request forgery (csrf)

2018-12-0416:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

Pluck v4.7.7 allows CSRF via admin.php?action=settings.

CPENameOperatorVersion
pluckeq4.7.7

CPE	Name	Operator	Version
	pluck	eq	4.7.7

References

github.com/security-breachlock/CVE-2018-16634/blob/master/PLUCK_CSRF.pdf