CVEvulnerability

CVE-2023-5519

4.3 MEDIUM Published 2023-10-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-352

Description

The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks.

Affected configurations

• metagauss eventprime (< 3.2.0)

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References