Unscored CVE-2021-20652 EUVD-2021-8070GHSA-322w-f24m-rgpr

Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack the authentication o…

Published Feb 5, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: J. Peters Product: Name Directory

Description

Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
J. Peters	Name Directory	1.17.4 and earlier	—

References

https://wordpress.org/plugins/name-directory/
https://jvn.jp/en/jp/JVN50470170/index.html