CVE-2020-5530 - Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors

Back Back to CVE browser

HIGH

Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors

Published Feb 18, 2020

8.8

HIGH

CVSS 3.1

EPSS 0.82%

Description

Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor Merv Barrett Product Easy Property Listings Default
n/a
- Version
  versions prior to 3.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Merv Barrett

Easy Property Listings

n/a

Version	Status	Constraints
versions prior to 3.4	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26692
Advisory
https://jvn.jp/en/jp/JVN89259622/index.html
x_refsource_MISCThird Party Advisory
https://wordpress.org/plugins/easy-property-listings/#developers
x_refsource_MISCRelease NotesThird Party Advisory
https://wpvulndb.com/vulnerabilities/10075
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26692		Advisory
https://jvn.jp/en/jp/JVN89259622/index.html		x_refsource_MISCThird Party Advisory
https://wordpress.org/plugins/easy-property-listings/#developers		x_refsource_MISCRelease NotesThird Party Advisory
https://wpvulndb.com/vulnerabilities/10075		x_refsource_MISCThird Party Advisory