Lucene search

K
wpvulndbSushmita PoudelWPVDB-ID:62C8A564-225E-4202-9BB0-03029FA4FD42
HistoryJun 12, 2024 - 12:00 a.m.

Himer - Social Questions and Answers < 2.1.1 - Bypass Poll Voting Restrictions via CSRF

2024-06-1200:00:00
Sushmita Poudel
wpscan.com
1
csrf checks
poll voting
attackers
theme security

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

17.1%

Description The theme does not have CSRF checks in some places, which could allow attackers to make users vote on any polls, including those they don’t have access to via a CSRF attack

PoC

The PoC will be displayed on June 26, 2024, to give users the time to update.

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

17.1%

Related for WPVDB-ID:62C8A564-225E-4202-9BB0-03029FA4FD42