Weaknesses of type CWE-352

5,687 results
CVE-2022-1732—Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRFEPSS 0.5%CVE-2024-24468HIGHCross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_customblock.phEPSS 0.5%CVE-2021-3730MEDIUMCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iiiEPSS 0.5%CVE-2021-24133—ActiveCampaign < 8.0.2 - Cross-Site Request Forgery in SettingsEPSS 0.5%CVE-2022-35943MEDIUMSameSite may allow cross-site request forgery (CSRF) protection to be bypassedEPSS 0.5%CVE-2024-7760HIGHCSRF in aimhubio/aimEPSS 0.5%CVE-2021-24251—Business Directory Plugin < 5.11.2 - Arbitrary Payment History UpdateEPSS 0.5%CVE-2020-8976CRITICALZGR TPS200 Cross-Site Request Forgery (CSRF)EPSS 0.5%CVE-2022-41253HIGHA cross-site request forgery (CSRF) vulnerability in Jenkins CONS3RT Plugin 1.0.0 and earlier allows attackers to connect to an attacker-speEPSS 0.5%CVE-2022-42199HIGHSimple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Exam List.EPSS 0.5%CVE-2022-41296MEDIUMIBM Db2U cross-site respect forgeryEPSS 0.5%CVE-2021-24725—Comment Link Remove and Other Comment Tools < 2.1.6 - Arbitrary Comment Deletion via CSRFEPSS 0.5%CVE-2024-29192HIGHGHSL-2023-206 gotortc Cross-Site Request Forgery vulnerabilityEPSS 0.5%CVE-2018-0146—A vulnerability in the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a cross-EPSS 0.5%CVE-2024-45264HIGHA cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a EPSS 0.5%CVE-2023-3579MEDIUMHadSky User cross-site request forgeryEPSS 0.5%CVE-2022-23976HIGHWordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Data Reset (Posts / Pages / Media)EPSS 0.5%CVE-2021-24431—Language Bar Flags <= 1.0.8 - CSRF to Stored XSSEPSS 0.5%CVE-2021-24586—Per Page Add to Head < 1.4.4 - CSRF to Stored XSSEPSS 0.5%CVE-2021-24806—wpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRFEPSS 0.5%