Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-7293. PoCs published by hyp3rlinx.
AI-analyzed exploit summary The exploit demonstrates a CSRF vulnerability in Zope Management Interface (ZMI) and Plone, allowing an attacker to perform actions such as adding links or injecting persistent XSS via crafted POST requests. The PoC includes HTML forms that automatically submit malicious requests to vulnerable endpoints.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.
Exploits (1)
The exploit demonstrates a CSRF vulnerability in Zope Management Interface (ZMI) and Plone, allowing an attacker to perform actions such as adding links or injecting persistent XSS via crafted POST requests. The PoC includes HTML forms that automatically submit malicious requests to vulnerable endpoints.
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H