CVE-2023-4251

EventPrime < 3.2.0 - Booking Creation via CSRF

Medium · published October 31, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00231 · 13.1th percentile
Published
2023-10-31T13:54Z
EPSS history
Timeline
  • 31 OCT 13:54Z
    EventPrime < 3.2.0 - Booking Creation via CSRF
    cvelistv5