CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,347 vulnerabilities with CWE-352
CVE-2024-5003 MEDIUM
WP Stacker < 1.8.5 - Cross-Site Request Forgery and Stored Cross-Site Scripting
CVSS 5.4
CVE-2024-2288 HIGH
lollms_web_ui < 9.3 - Cross-Site Request Forgery and Stored Cross-Site Scripting via Profile Picture Upload
CVSS 8.3
CVE-2024-1879 HIGH
autogpt_classic v0.5.0 - Cross-Site Request Forgery via Unprotected API Endpoint
CVSS 8.8
CVE-2024-36670 HIGH
idccms v1.35 - Cross-Site Request Forgery via admin/vpsClass_deal.php?mudi=del
CVSS 8.8
CVE-2024-36669 HIGH
idccms v1.35 - Cross-Site Request Forgery via admin/type_deal.php?mudi=add
CVSS 8.8
CVE-2024-36668 HIGH
idccms v1.35 - Cross-Site Request Forgery via admin/type_deal.php?mudi=del
CVSS 8.8
CVE-2024-36667 HIGH
idccms v1.35 - Cross-Site Request Forgery via /admin/idcProType_deal.php
CVSS 8.8
CVE-2024-35673 MEDIUM
Pure Chat by Ruby Pure Chat <= 2.22 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-2368 MEDIUM
Mollie Forms <= 2.6.13 - Cross-Site Request Forgery via duplicateForm() Function
CVSS 4.3
CVE-2024-36550 HIGH
idccms V1.35 - Cross-Site Request Forgery via /admin/vpsCompany_deal.php
CVSS 8.8
CVE-2024-36549 HIGH
idccms v1.35 - Cross-Site Request Forgery via /admin/vpsCompany_deal.php
CVSS 8.8
CVE-2024-36548 HIGH
idccms V1.35 - Cross-Site Request Forgery via admin/vpsCompany_deal.php?mudi=del
CVSS 8.8
CVE-2024-36547 HIGH
idccms V1.35 - Cross-Site Request Forgery via admin/vpsClass_deal.php
CVSS 8.8
CVE-2024-35632 MEDIUM
Integration for Contact Form 7 and Constant Contact < 1.1.5 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-35638 MEDIUM
JumpDEMAND Inc. ActiveDEMAND - CSRF
CVSS 4.3
CVE-2024-4344 MEDIUM
Shield Security < 19.1.13 - Cross-Site Request Forgery via Missing Nonce Validation
CVSS 4.3
CVE-2024-35636 MEDIUM
Uploadcare File Uploader and Adaptive Delivery (beta) < 3.0.11 - Cross-Site Request Forgery
CVSS 4.3
CVE-2024-34008 HIGH
Moodle 4.0-4.3.3 - Cross-Site Request Forgery in Analytics Model Management
CVSS 8.8
CVE-2024-34007 HIGH
Moodle 4.3.0-4.3.3 - Cross-Site Request Forgery in MFA Logout
CVSS 8.8
CVE-2024-34001 HIGH
moodle <4.1.10 and 4.3.0-4.3.4 - Cross-Site Request Forgery in Admin Preset Tool
CVSS 8.4
CVE-2024-4426 MEDIUM
Comparison Slider <= 1.0.5 - Cross-Site Request Forgery via AJAX Action Nonce Bypass
CVSS 4.3
CVE-2024-4218 MEDIUM
AffiEasy <= 1.1.6 - Cross-Site Request Forgery
CVSS 6.5
CVE-2024-3947 MEDIUM
Delower WP TO DO < 1.3.0 - CSRF
CVSS 4.3
CVE-2024-3945 MEDIUM
Delower WP TO DO < 1.3.0 - CSRF
CVSS 4.3
CVE-2024-3943 MEDIUM
Delower WP TO DO < 1.3.0 - CSRF
CVSS 4.3
Details
Vulnerabilities 9,347
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits