← CVE Intelligence

CVE-2022-0616

Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF PUBLISHED

Description (CNA)

The Amelia WordPress plugin before 1.0.47 does not have CSRF check in place when deleting customers, which could allow attackers to make a logged in admin delete arbitrary customers via a CSRF attack

Affected (CNA)

Vendor / productVersions
Unknown / Amelia – Events & Appointments Booking Calendaraffected 1.0.47 before 1.0.47

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.