Himer - Social Questions and Answers < 2.1.1 - Arbitrary Group Joining via CSRF

2024-06-1200:00:00

Sushmita Poudel

wpscan.com

himer

social questions

arbitrary group joining

csrf

update

june 26 2024

private groups

software

6.4 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

Description The theme does not have CSRF checks in some places, which could allow attackers to make users join private groups via a CSRF attack

The PoC will be displayed on June 26, 2024, to give users the time to update.

CPENameOperatorVersion
eq2.1.1

CPE	Name	Operator	Version
		eq	2.1.1