← CVE Intelligence

CVE-2021-24133

ActiveCampaign < 8.0.2 - Cross-Site Request Forgery in Settings PUBLISHED

Description (CNA)

Lack of CSRF checks in the ActiveCampaign WordPress plugin, versions before 8.0.2, on its Settings form, which could allow attacker to make a logged-in administrator change API Credentials to attacker's account.

Affected (CNA)

Vendor / productVersions
Unknown / ActiveCampaignaffected 8.0.2 before 8.0.2

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.