PT-2024-15213 · Peepso · The Community By Peepso
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
The Community by PeepSo WordPress plugin versions prior to 6.3.1.2
Description
The issue is related to the lack of a CSRF check when creating a user post, which could allow attackers to make logged-in users perform such actions via a CSRF attack. This could be exploited by making logged-in users create posts on their wall in their profile page without their knowledge or consent.
Recommendations
For versions prior to 6.3.1.2, update to version 6.3.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the user post creation feature until the update is applied.
Exploit
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
The Community By Peepso