Innovs Hr vulnerabilities
1 known vulnerability in Innovs Hr from TheInnovs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
Innovs HR: Cross-Site Request Forgery
The Innovs HR WordPress plugin before 1.0.3.7.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as adding them as employees.