Unscored CVE-2019-5963 EUVD-2019-15531GHSA-3xg7-hprv-32gf

Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of a…

Published Jul 5, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: Zoho SalesIQ Team Product: Zoho SalesIQ

Description

Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Zoho SalesIQ Team	Zoho SalesIQ	1.0.8 and earlier	—

References

https://wordpress.org/plugins/zoho-salesiq/
https://jvn.jp/en/jp/JVN88962935/index.html
https://wpvulndb.com/vulnerabilities/9433