medium6.8
CVE-2013-3258
Cross-site request forgery (CSRF) vulnerability in he Digg Digg plugin before 5.3.5 for WordPress allows remote attackers to hijack the authentication of users…
Impact
Cross-site request forgery (CSRF) vulnerability in he Digg Digg plugin before 5.3.5 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bufferapp | Digg Digg | through 5.3.4 Versions 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/53120
- http://wordpress.org/plugins/digg-digg/changelog/
- http://www.securityfocus.com/bid/60046
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84418
- http://secunia.com/advisories/53120
- http://wordpress.org/plugins/digg-digg/changelog/
- http://www.securityfocus.com/bid/60046
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84418