Description

Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin.

Remediation

References

CVE-2017-5476

Related Vulnerabilities

WordPress Plugin Marketo Forms and Tracking Cross-Site Request Forgery (1.0.2)

WordPress Plugin Affiliates Manager Cross-Site Request Forgery (2.6.5)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-17531)

DOMPurify Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2024-48910)

ProjectSend Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-53980)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2017-5476