CVE-2023-25976

MEDIUM

Crmperks Integration For Contact Form 7 And Zoho Crm, Bigin - CSRF

Title source: rule
STIX 2.1

Description

Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin plugin <= 1.2.2 versions.

Exploits (1)

github WRITEUP
by yaudahbanh · poc
https://github.com/yaudahbanh/CVE-Archive/tree/main/CVE-2023-25976

Scores

CVSS v3 4.3
EPSS 0.0010
EPSS Percentile 27.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

CWE
CWE-352
Status published
Products (2)
CRM Perks/Integration for Contact Form 7 and Zoho CRM, Bigin < 1.2.2
crmperks/integration_for_contact_form_7_and_zoho_crm\,_bigin < 1.2.2
Published May 26, 2023
Tracked Since Feb 18, 2026