Unscored CVE-2019-5924 EUVD-2019-15492GHSA-r7jx-h7qj-vxgc

Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of a…

Published Mar 12, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.

Affected products

Vendor	Product	Affected	Fixed
RedNao	Smart Forms	2.6.15 and earlier	—

References

JVN#97656108 third-party-advisory
https://wordpress.org/plugins/smart-forms/#developers
https://wpvulndb.com/vulnerabilities/9232