• caglararli@hotmail.com
  • 05386281520

CVE-2024-13647 | themesawesome School Management System Plugin up to 1.0.8 on WordPress Setting save_exam_setting/delete_exam_setting cross-site request forgery

Çağlar Arlı      -    3 Views

CVE-2024-13647 | themesawesome School Management System Plugin up to 1.0.8 on WordPress Setting save_exam_setting/delete_exam_setting cross-site request forgery

A vulnerability, which was classified as problematic, has been found in themesawesome School Management System Plugin up to 1.0.8 on WordPress. Affected by this issue is the function save_exam_setting/delete_exam_setting of the component Setting Handler. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2024-13647. The attack may be launched remotely. There is no exploit available.