Lucene search

K
cvelistMitreCVELIST:CVE-2020-35943
HistoryFeb 09, 2021 - 5:49 p.m.

CVE-2020-35943

2021-02-0917:49:27
mitre
www.cve.org
3
cve-2020-35943
csrf
nextgen gallery
wordpress
file upload
csrf protection

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

27.4%

A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload. (It is possible to bypass CSRF protection by simply not including a nonce parameter.)

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

27.4%