Unscored CVE-2019-5973 EUVD-2019-15541GHSA-8xf5-xj83-qmxv

Cross-site request forgery (CSRF) vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentica…

Published Jul 5, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: SUKIMALAB.COM Product: Online Lesson Booking

Description

Cross-site request forgery (CSRF) vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
SUKIMALAB.COM	Online Lesson Booking	0.8.6 and earlier	—

References

https://olbsys.com/fixed-vulnerability-issue/
https://wordpress.org/plugins/online-lesson-booking-system/#developers
https://jvn.jp/en/jp/JVN96988995/index.html
https://wpvulndb.com/vulnerabilities/9435