8.8

CVE-2023-2330

Exploit

Caldera Forms Google Sheets Connector <= 1.3 - Cross-Site Request Forgery

The Caldera Forms Google Sheets Connector WordPress plugin before 1.3 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a CSRF attack
Mögliche Gegenmaßnahme
Caldera Forms Google Sheets Connector: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Caldera Forms Google Sheets Connector
Version * - 1.3
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gsheetconnector ≫ Caldera Forms Google Sheets Connector SwPlatformwordpress Version <= 1.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.319
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H