Non notée
CVE-2021-24823 The Support Board WordPress plugin before 3.3.6 does not have any CSRF checks in actions handled by the include/ajax.php…
Description
The Support Board WordPress plugin before 3.3.6 does not have any CSRF checks in actions handled by the include/ajax.php file, which could allow attackers to make logged in users do unwanted actions. For example, make an admin delete arbitrary files
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Support Board 3.3 | premières → < 3.3.6 | 3.3.6 |