Vulnerabilities > CVE-2021-4408 - Unspecified vulnerability in Designwall DW Question & Answer

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

designwall

NVD

Published: 2023-07-12

Updated: 2023-11-07

Summary

The DW Question & Answer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.8. This is due to missing or incorrect nonce validation on the update_answer() function. This makes it possible for unauthenticated attackers to update answers to questions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Vulnerable Configurations

Part	Description	Count
Application	Designwall Designwall DW Question & Answer - Designwall DW Question & Answer 1.0.0 Designwall DW Question & Answer 1.0.1 Designwall DW Question & Answer 1.0.2 Designwall DW Question & Answer 1.0.3 Designwall DW Question & Answer 1.0.4 Designwall DW Question & Answer 1.0.5 Designwall DW Question & Answer 1.0.6 Designwall DW Question & Answer 1.0.7 Designwall DW Question & Answer 1.0.8 Designwall DW Question & Answer 1.0.9 Designwall DW Question & Answer 1.1.0 Designwall DW Question & Answer 1.1.1 Designwall DW Question & Answer 1.1.2 Designwall DW Question & Answer 1.1.3 Designwall DW Question & Answer 1.1.4 Designwall DW Question & Answer 1.1.5 Designwall DW Question & Answer 1.1.6 Designwall DW Question & Answer 1.1.7 Designwall DW Question & Answer 1.1.8 Designwall DW Question & Answer 1.1.9 Designwall DW Question & Answer 1.2.0 Designwall DW Question & Answer 1.2.1 Designwall DW Question & Answer 1.2.2 Designwall DW Question & Answer 1.2.3 Designwall DW Question & Answer 1.2.4 Designwall DW Question & Answer 1.2.5 Designwall DW Question & Answer 1.2.6 Designwall DW Question & Answer 1.2.7 Designwall DW Question & Answer 1.2.8 Designwall DW Question & Answer 1.2.9 Designwall DW Question & Answer 1.3.0 Designwall DW Question & Answer 1.3.1 Designwall DW Question & Answer 1.3.2 Designwall DW Question & Answer 1.3.3 Designwall DW Question & Answer 1.3.4 Designwall DW Question & Answer 1.3.5 Designwall DW Question & Answer 1.5.7	38

Summary

Vulnerable Configurations

References