Lucene search

PRIOn knowledge basePRION:CVE-2024-22290

HistoryJan 31, 2024 - 12:16 p.m.

Cross site request forgery (csrf)

2024-01-3112:16:00

PRIOn knowledge base

www.prio-n.com

cross-site request forgery

abozain

o7abeeb

unitone

custom dashboard widgets

cross-site scripting

xss

vulnerability

nvd

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Scripting (XSS).This issue affects Custom Dashboard Widgets: from n/a through 1.3.1.

CPENameOperatorVersion
custom_dashboard_widgetsle1.3.1

CPE	Name	Operator	Version
	custom_dashboard_widgets	le	1.3.1

References

patchstack.com/database/vulnerability/custom-dashboard-widgets/wordpress-custom-dashboard-widgets-plugin-1-3-1-csrf-to-xss-vulnerability?_s_id=cve