CVE-2022-4553

FL3R FeelBox <= 8.1 - Moods Reset via CSRF

Medium · published January 30, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
17.8
In the wild
Unconfirmed
What it is

The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating reseting moods which could allow attackers to make logged in admins perform such action via a CSRF attack and delete the lydl_posts & lydl_poststimestamp DB tables

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00267 · 17.8th percentile
Published
2023-01-30T20:31Z
EPSS history
Timeline
  • 30 JAN 20:31Z
    FL3R FeelBox <= 8.1 - Moods Reset via CSRF
    cvelistv5