3 matches found
EUVD-2022-51621
Malicious code in bioql PyPI...
8.8CVSS8.4AI score0.00511EPSS
SaveExploits2References1
Cross site request forgery (csrf)
The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the promptdismissnotice action and also lacks CSRF check in the related action. This could allow any authenticated users, such as subscriber to perform Object...
6.5CVSS8.6AI score0.00511EPSS
SaveExploits2References1Affected Software1
CVE-2022-4265: Cross-Site Request Forgery (CSRF)
The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the promptdismissnotice action and also lacks CSRF check in the related action. This could allow any authenticated users, such as subscriber to perform Object...
8.8CVSS5.8AI score0.00511EPSS
SaveExploits2References2
20