Vulnerabilities > CVE-2022-4553 - Unspecified vulnerability in Fl3R Feelbox Project Fl3R Feelbox

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
fl3r-feelbox-project

Summary

The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating reseting moods which could allow attackers to make logged in admins perform such action via a CSRF attack and delete the lydl_posts & lydl_poststimestamp DB tables

Vulnerable Configurations

Part Description Count
Application
Fl3R_Feelbox_Project
1