4.3
Medium
CVE-2023-23899 Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7…
Description
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7 plugin <= 2.0.8 versions leads to arbitrary plugin activation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) 2.0 | earliest → 2.0.8 | No fix stated |