CVE-2017-20065
Supsystic Popup Plugin cross-site request forgery
MEDIUM 4.3EPSS 0.7%
A vulnerability was found in Supsystic Popup Plugin 1.7.6 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
- Affected
- Supsystic · Popup Plugin
- CVSS v3.1 NVD
- 4.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 0.71% chance of exploitation in the next 30 days, 53rd percentile
- Published
- 2022-06-20
- Updated
- 2025-04-15
Proof-of-concept exploits (1)
Security advisories
- http://seclists.org/fulldisclosure/2017/Feb/97
- https://map.httpcs.com/alert/284665
- https://vuldb.com/?id.97385
- https://www.exploit-db.com/exploits/41485