CVE-2022-45828

Cross-Site Request Forgery CSRF vulnerability in NooTheme Noo Timetable plugin = 2.1.3 versions...

CVE-2022-45828

CVE-2022-45828 : CSRF vulnerability in the WordPress plugin “Noo Timetable” (NooTheme) affecting versions ≤ 2.1.3. Underlying issue: CSRF in the plugin could lead to unauthorized actions by an authenticated user. CVSS shows high impact (C/H, I/H, A/H in the primary entry; network attack vector, u...

CVE-2022-45828 WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in NooTheme Noo Timetable plugin = 2.1.3 versions...

WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software NOO Timetable Type Plugin Vulnerable versions = 2.1.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-45828 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4af0996a38ae Credits Cat Required privilege...