Unscored CVE-2019-5920 EUVD-2019-15488GHSA-v6jx-mp4m-86m6

Cross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of admi…

Published Mar 12, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.

Affected products

Vendor	Product	Affected	Fixed
nCrafts	FormCraft	1.2.1 and earlier	—

References

https://wordpress.org/plugins/formcraft-form-builder/#developers
JVN#83501605 third-party-advisory
https://wpvulndb.com/vulnerabilities/9231