Cross-site request forgery (CSRF) vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://wordpress.org/plugins/browser-and-operating-system-finder/ | third party advisory |
https://jvn.jp/en/jp/JVN93562098/index.html | third party advisory |