CyberRota Analysis
AI analysis pending.
CVE
CVE-2023-0763
Severity
MEDIUM
CVSS
4.3
EPSS
0.28%
WordPress
Original NVD Description
The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting Holidays, which could allow attackers to make logged in admins delete arbitrary holidays via a CSRF attack