CVE-2021-24162CWE-352

Responsive Menu < 4.0.4 - CSRF to Settings Update

published April 5, 2021

CVSS
—
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into importing all new settings. These settings could be modified to include malicious JavaScript, therefore allowing an attacker to inject payloads that could aid in further infection of the site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00796 · 56.0th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2021-04-05T18:27Z
EPSS history
Timeline
  • 05 APR 18:27Z
    Responsive Menu < 4.0.4 - CSRF to Settings Update
    cvelistv5