CVE-2021-37366

CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel

published August 10, 2021

CVSS
—
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel. By combining CSRF with XSS, an attacker can trick the administrator into clicking a link that cancels the filtering for all standard users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00509 · 42.6th percentile
Published
2021-08-10T15:12Z
EPSS history
Timeline
  • 10 AUG 15:12Z
    CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel
    cvelistv5