Unscored CVE-2019-5971 EUVD-2019-15539GHSA-rc39-3fcg-j36g

Cross-site request forgery (CSRF) vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijack the authenticatio…

Published Jul 5, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: SUKIMALAB.COM Product: Attendance Manager

Description

Cross-site request forgery (CSRF) vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
SUKIMALAB.COM	Attendance Manager	0.5.6 and earlier	—

References

http://attmgr.com/fixed-vulnerability-issue/
https://wordpress.org/plugins/attendance-manager/#developers
https://jvn.jp/en/jp/JVN95685939/index.html
https://wpvulndb.com/vulnerabilities/9434