Himer - Social Questions and Answers < 2.1.1 - Bypass Poll Voting Restrictions via CSRF

2024-06-1200:00:00

Sushmita Poudel

himer

social questions

answers

csrf

exploit

poll voting restrictions

6.7 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

Description The theme does not have CSRF checks in some places, which could allow attackers to make users vote on any polls, including those they don’t have access to via a CSRF attack

The PoC will be displayed on June 26, 2024, to give users the time to update.