Cross-Site Request Forgery (CSRF) — CVEs by weakness type

Sales Tracker Management System HIGH 8.8

CVE-2023-0999

A vulnerability classified as problematic was found in SourceCodester Sales Tracker Management System 1.0. This vulnerability affects unknown code of…

No fix yet

Fix from $1,950 2023-02-24

Infinity Dc Power Plant HIGH 8.8

CVE-2022-1607

Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant allows Cross Site Request F…

Fix: 5.0.0+

Fix from $1,950 2023-02-24

Application Policy Infrastructure Controller HIGH 8.8

CVE-2023-20011

A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller…

Fix: 5.2 / 6.0+

Fix from $1,950 2023-02-23

Online Pizza Ordering System HIGH 8.8

CVE-2023-0988

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unkn…

No fix yet

Fix from $1,950 2023-02-23

Chatbot HIGH 8.8

CVE-2023-24415

Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.2.8 versions.

Fix: 4.2.9+

Fix from $1,950 2023-02-23

Motomo HIGH 8.8

CVE-2023-23659

Cross-Site Request Forgery (CSRF) vulnerability in MainWP Matomo Extension <= 4.0.4 versions.

Fix: 4.0.5+

Fix from $1,950 2023-02-23

Organization Chart HIGH 8.8

CVE-2023-24384

Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Organization chart <= 1.4.4 versions.

Fix: after 1.4.4

Fix from $1,950 2023-02-23

Submitbymailplugin HIGH 8.8

CVE-2015-10081

A vulnerability was found in arnoldle submitByMailPlugin 1.0b2.9 and classified as problematic. This issue affects some unknown processing of the fil…

Patch available

Fix from $1,950 2023-02-20

Apollo MEDIUM 5.7

CVE-2023-25569

Apollo is a configuration management system. Prior to version 2.1.0, a low-privileged user can create a special web page. If an authenticated portal …

Fix: 2.1.0+

Fix from $1,600 2023-02-20

Booking Calendar MEDIUM 5.4

CVE-2023-24388

Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions affects plugin form…

Fix: 3.2.4+

Fix from $1,600 2023-02-17

Baijiacms MEDIUM 6.5

CVE-2021-33396

Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary acco…

No fix yet

Fix from $1,600 2023-02-15

Media Control Panel HIGH 8.8

CVE-2023-23465

Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint.

No fix yet

Fix from $1,950 2023-02-15

Azure Credentials HIGH 8.8

CVE-2023-25767

A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an…

Fix: 254.v64da_8176c83a+

Fix from $1,950 2023-02-15

Pandora Fms MEDIUM 6.1

CVE-2022-47373

Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forg…

Fix: after 766

Fix from $1,600 2023-02-15

Pandora Fms MEDIUM 5.4

CVE-2022-47372

Stored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker typically exploits this vuln…

Fix: after 766

Fix from $1,600 2023-02-15

Firco Compliance Link HIGH 8.8

CVE-2022-29557

LexisNexis Firco Compliance Link 3.7 allows CSRF.

Mitigation only

Fix from $1,950 2023-02-15

Quiz And Survey Master HIGH 8.8

CVE-2022-46862

Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0…

Fix: 8.0.8+