nvd-json-data-feeds/CVE-2023/CVE-2023-42xx/CVE-2023-4251.json

{
  "id": "CVE-2023-4251",
  "sourceIdentifier": "contact@wpscan.com",
  "published": "2023-10-31T14:15:11.920",
  "lastModified": "2023-11-07T04:22:22.287",
  "vulnStatus": "Undergoing Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "The EventPrime WordPress plugin before 3.2.0 does not have CSRF checks when creating bookings, which could allow attackers to make logged in users create unwanted bookings via CSRF attacks."
    },
    {
      "lang": "es",
      "value": "El complemento EventPrime WordPress anterior a 3.2.0 no tiene comprobaciones CSRF al crear reservas, lo que podr\u00eda permitir a los atacantes hacer que los usuarios registrados creen reservas no deseadas a trav\u00e9s de ataques CSRF."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://wpscan.com/vulnerability/ce564628-3d15-4bc5-8b8e-60b71786ac19",
      "source": "contact@wpscan.com"
    }
  ]
}