PT-2025-26343 · Jobwp · Jobwp
Nguyen Tran Tuan Dung
·
Published
2025-06-20
·
Updated
2025-06-20
·
CVE-2025-49975
CVSS v3.1
4.3
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
CSRF
Weakness Enumeration
Related Identifiers
Affected Products
Jobwp
Nguyen Tran Tuan Dung
·
Published
2025-06-20
·
Updated
2025-06-20
·
CVE-2025-49975
4.3
Medium
| Base vector | Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
JobWP versions n/a through 2.4.0
Description:
A Cross-Site Request Forgery (CSRF) issue affects the software, allowing unauthorized actions to be performed on behalf of a user.
Recommendations:
For versions n/a through 2.4.0, update to a version that includes a fix for this issue, as no specific mitigation measures are provided for these versions.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
CSRF