Field Assessment
AI analysis pending.
CVE
CVE-2010-2294
Severity
MEDIUM
CVSS
6.8
EPSS
0.58%
Original Filing — NVD Description
Cross-site request forgery (CSRF) vulnerability in Plume CMS 1.2.4 and possibly earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors.