Lucene search
HistoryNov 12, 2023 - 10:15 p.m.
CVE-2023-28498
cross-site request forgery
cve-2023-28498
motopress hotel booking lite
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.1%
Cross-Site Request Forgery (CSRF) vulnerability in MotoPress Hotel Booking Lite plugin <= 4.6.0 versions.
Affected configurations
Node
motopresshotel_booking_liteRange≤4.6.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| motopress | hotel_booking_lite | * | cpe:2.3:a:motopress:hotel_booking_lite:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
cve
cve
CVE-2023-28498
2023-11-12 22:15:29
vulnrichment
vulnrichment
prion
prion
Cross site request forgery (csrf)
2023-11-12 22:15:00
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.1%
Related for NVD:CVE-2023-28498