Unscored CVE-2019-6030 EUVD-2019-15598GHSA-88cm-wv2h-x7fx

Cross-site request forgery (CSRF) vulnerability in Custom Body Class 0.6.0 and earlier allows remote attackers to hijack the authentication…

Published Dec 26, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: Andrei Lupu Product: Custom Body Class

Description

Cross-site request forgery (CSRF) vulnerability in Custom Body Class 0.6.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Andrei Lupu	Custom Body Class	0.6.0 and earlier	—

References

https://wordpress.org/plugins/wp-custom-body-class/
http://jvn.jp/en/jp/JVN26847507/index.html