CVE-2019-5971

The CVE-2019-5971 entry concerns a Cross-site request forgery (CSRF) vulnerability in the WordPress Attendance Manager plugin, affected through version 0.5.6 and earlier. The issue allows remote attackers to hijack administrator authentication via unspecified vectors. Reported impact notes indica...

CVE-2019-5970

The CVE-2019-5970 entry applies to WordPress Plugin Attendance Manager (versions ≤ 0.5.6). The vulnerability is a Self-reported Stored Cross-Site Scripting (CWE-79) in which an attacker can inject arbitrary script/HTML via unspecified vectors, potentially executing code in the administrator’s bro...