2 matches found
CVE-2014-9129
Cross-site request forgery CSRF vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the addonstitle parameter in the...
6.4AI score0.01533EPSS
SaveExploits2References4
CVE-2014-9129: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the addonstitle parameter in the...
6.8CVSS5.8AI score0.01533EPSS
SaveExploits2References2
20