CVE-2023-25449

概要

参考情報

• patchstack.com/database/vulnerability/cforms2/wordpress-cformsii-plugin-15-0-4-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

cformsii のその他の脆弱性

• CVE-2023-52203中 4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Seidel, Bastian Germann cformsI…
• CVE-2014-10393中 6.1The cforms2 plugin before 10.5 for WordPress has XSS.
• CVE-2014-10392中 6.1The cforms2 plugin before 10.2 for WordPress has XSS.
• CVE-2017-18570緊急 9.8The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.
• CVE-2015-9333緊急 9.8The cforms2 plugin before 14.6.10 for WordPress has SQL injection.