Cross site request forgery (csrf)

2021-08-1023:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.2%

JSON

A cross-site request forgery (CSRF) vulnerability in the My SMTP Contact v1.1.1 plugin for GetSimple CMS allows remote attackers to change the SMTP settings of the contact forms for the webpages of the CMS after an authenticated admin visits a malicious third-party site.

CPENameOperatorVersion
my_smtp_contacteq1.1.1

CPE	Name	Operator	Version
	my_smtp_contact	eq	1.1.1

References

get-simple.info/extend/plugin/my-smtp-contact/1221/