CVE-2019-5971

The CVE-2019-5971 entry concerns a Cross-site request forgery (CSRF) vulnerability in the WordPress Attendance Manager plugin, affected through version 0.5.6 and earlier. The issue allows remote attackers to hijack administrator authentication via unspecified vectors. Reported impact notes indica...

CVE-2019-5971

Cross-site request forgery CSRF vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

JVN#95685939: Multiple vulnerabilities in WordPress Plugin "Attendance Manager"

WordPress Plugin "Attendance Manager" provided by SUKIMALAB.COM contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2019-5970 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...