Unscored CVE-2021-20782 EUVD-2021-8194GHSA-5xvg-cwvf-6x65

Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the a…

Published Jul 14, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Tips and Tricks HQ Product: Software License Manager

Description

Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Tips and Tricks HQ	Software License Manager	versions prior to 4.4.6	—

References

https://wordpress.org/plugins/software-license-manager/
https://www.tipsandtricks-hq.com/software-license-manager-plugin-for-wordpress
https://jvn.jp/en/jp/JVN89054582/index.html