Lucene search
PatchstackVULNRICHMENT:CVE-2023-29425HistoryNov 12, 2023 - 9:16 p.m.
CVE-2023-29425 WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Request Forgery (CSRF)
2023-11-1221:16:12
CWE-352
Patchstack
github.com
1
wordpress
shiftcontroller
employee
scheduling
plugin
csrf
vulnerability
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
AI Score
7.1
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Cross-Site Request Forgery (CSRF) vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin <= 4.9.23 versions.
Related
cvelist
cvelist
wpvulndb
wpvulndb
ShiftController Employee Shift Scheduling < 4.9.24 - CSRF
2023-11-12 00:00:00
nvd
nvd
CVE-2023-29425
2023-11-12 22:15:30
cve
cve
CVE-2023-29425
2023-11-12 22:15:30
prion
prion
Cross site request forgery (csrf)
2023-11-12 22:15:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
AI Score
7.1
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-29425