Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•2 views

CVE-2025-46512: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Shamim Hasan Custom Functions Plugin custom-functions allows Stored XSS.This issue affects Custom Functions Plugin: from n/a through = 1.1...

7.1CVSS5.8AI score0.00137EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/24 12:00 a.m.•25 views

PT-2025-17818 · Unknown · Shamim Hasan Custom Functions Plugin

Name of the Vulnerable Software and Affected Versions: Shamim Hasan Custom Functions Plugin versions 1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For Shamim Hasan Custom Functions Plugin versions 1.1 and earlier...

7.1CVSS7.4AI score0.00137EPSS
SaveExploits0References6
Rows per page
Query Builder