3 matches found
CVE-2020-13458
CVE-2020-13458 affects the Craft CMS Image Resizer plugin prior to 2.0.9. The issue is a CSRF flaw in the log-clear controller action, enabling CSRF exploitation with no authentication and requiring user interaction. CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, low attack complex...
8.8CVSS8.7AI score0.00484EPSS
SaveExploits0References1Affected Software1
CVE-2020-13458
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action...
8.8AI score0.00484EPSS
SaveExploits0References1
CVE-2020-13458: Cross-Site Request Forgery (CSRF)
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action...
8.8CVSS7.8AI score0.00484EPSS
SaveExploits0References2
20