2.4.8

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-19	CVE-2023-48751	Unspecified vulnerability in Xnau Participants Database Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects Participants Database: from n/a through 2.5.5. network low complexity xnau	8.8
2023-11-09	CVE-2023-31235	Unspecified vulnerability in Xnau Participants Database Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database plugin <= 2.4.9 versions. network low complexity xnau	8.8