Lucene search
HistoryJan 31, 2024 - 12:16 p.m.
CVE-2024-22290
cve-2024-22290
cross-site request forgery
cross-site scripting
abozain
o7abeeb
unitone
custom dashboard widgets
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
24.1%
Cross-Site Request Forgery (CSRF) vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting (XSS).This issue affects Custom Dashboard Widgets: from n/a through 1.3.1.
Affected configurations
Node
custom_dashboard_widgets_projectcustom_dashboard_widgetsRange≤1.3.1wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| custom_dashboard_widgets_project | custom_dashboard_widgets | * | cpe:2.3:a:custom_dashboard_widgets_project:custom_dashboard_widgets:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2024-01-31 12:16:00
cve
cve
CVE-2024-22290
2024-01-31 12:16:05
wpvulndb
wpvulndb
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
24.1%
Related for NVD:CVE-2024-22290