Vulnerabilities > CVE-2021-24805 - Unspecified vulnerability in Designwall DW Question & Answer

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

designwall

NVD

Published: 2022-04-25

Updated: 2024-11-21

Summary

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status.

Vulnerable Configurations

Part	Description	Count
Application	Designwall Designwall DW Question & Answer - Designwall DW Question & Answer 1.0.0 Designwall DW Question & Answer 1.0.1 Designwall DW Question & Answer 1.0.2 Designwall DW Question & Answer 1.0.3 Designwall DW Question & Answer 1.0.4 Designwall DW Question & Answer 1.0.5 Designwall DW Question & Answer 1.0.6 Designwall DW Question & Answer 1.0.7 Designwall DW Question & Answer 1.0.8 Designwall DW Question & Answer 1.0.9 Designwall DW Question & Answer 1.1.0 Designwall DW Question & Answer 1.1.1 Designwall DW Question & Answer 1.1.2 Designwall DW Question & Answer 1.1.3 Designwall DW Question & Answer 1.1.4 Designwall DW Question & Answer 1.1.5 Designwall DW Question & Answer 1.1.6 Designwall DW Question & Answer 1.1.7 Designwall DW Question & Answer 1.1.8 Designwall DW Question & Answer 1.1.9 Designwall DW Question & Answer 1.2.0 Designwall DW Question & Answer 1.2.1 Designwall DW Question & Answer 1.2.2 Designwall DW Question & Answer 1.2.3 Designwall DW Question & Answer 1.2.4 Designwall DW Question & Answer 1.2.5 Designwall DW Question & Answer 1.2.6 Designwall DW Question & Answer 1.2.7 Designwall DW Question & Answer 1.2.8 Designwall DW Question & Answer 1.2.9 Designwall DW Question & Answer 1.3.0 Designwall DW Question & Answer 1.3.1 Designwall DW Question & Answer 1.3.2 Designwall DW Question & Answer 1.3.3 Designwall DW Question & Answer 1.3.4	36

Summary

Vulnerable Configurations

References