Vulnerability Description
Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in AWeber AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth allows Accessing Functionality Not Properly Constrained by ACLs, Cross-Site Request Forgery.This issue affects AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth: from n/a through 7.3.9.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Aweber | Aweber | < 7.3.10 |
Related Weaknesses (CWE)
References
- https://patchstack.com/database/vulnerability/aweber-web-form-widget/wordpress-aThird Party Advisory
- https://patchstack.com/database/vulnerability/aweber-web-form-widget/wordpress-aThird Party Advisory
FAQ
What is CVE-2023-47757?
CVE-2023-47757 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in AWeber AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth allows Acces...
How severe is CVE-2023-47757?
CVE-2023-47757 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-47757?
Check the references section above for vendor advisories and patch information. Affected products include: Aweber Aweber.