CVE-2024-2235
Himer - Social Questions and Answers < 2.1.1 - Bypass Poll Voting Restrictions via CSRF
MEDIUM 4.3EPSS 0.2%
The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users vote on any polls, including those they don't have access to via a CSRF attack
- Affected
- Himer
- CVSS v3.1 NVD
- 4.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - CVSS v3.1 CNA
- 6.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - EPSS
- 0.19% chance of exploitation in the next 30 days, 8th percentile
- Published
- 2024-07-03
- Updated
- 2024-08-01