PT-2014-2617 · WordPress · Wordpress Calendar Plugin

CVE-2013-2698

Publicado

2014-05-27

Atualizado

2017-08-29

CVSS v2.0

6.8

Média

Vetor

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WordPress Calendar plugin versions prior to 1.3.3

Description A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that add calendar entries.

Recommendations For WordPress Calendar plugin versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue.

Correção

CSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2013-2698

Wordpress Calendar Plugin