PT-2023-9954 · Bestwebsoft · Bestwebsoft Portfolio Plugin

Published 2023-12-26 · Updated 2024-05-17 · CVE-2012-10017

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BestWebSoft Portfolio Plugin versions up to 2.04

Description A vulnerability was found in the BestWebSoft Portfolio Plugin, which has been classified as problematic. This issue affects an unknown part of the plugin and leads to cross-site request forgery. The manipulation can be initiated remotely.

Recommendations For BestWebSoft Portfolio Plugin versions up to 2.04, upgrade to version 2.06 to address this issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2012-10017

Affected Products

Bestwebsoft Portfolio Plugin

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-10017 · Security Note
• https://github.com/wp-plugins/portfolio/commit/68af950330c3202a706f0ae9bbb52ceaa17dda9d · Patch
• https://t.me/cvenotify/65133 · Telegram Post
• https://t.me/cvenotify/66149 · Telegram Post
• https://vuldb.com/?ctiid.248955 · Note
• https://vuldb.com/?id.248955 · Note