Unscored CVE-2019-5974 EUVD-2019-15542GHSA-hfjc-7hm9-35pp

Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentic…

Published Jul 5, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: contest-gallery Product: Contest Gallery

Description

Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Contest-Gallery	Contest Gallery	versions prior to 10.4.5	—

References

https://wordpress.org/plugins/contest-gallery/
https://jvn.jp/en/jp/JVN80925867/index.html
https://wpvulndb.com/vulnerabilities/9436