TI-2023-05958 CVE-2023-6501 · GHSA-2rrj-g8ch-3g5fSplashscreen <= 0.20 - Settings Update via CSRFPriority LOW 19The Splashscreen WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attackCVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00221 · Published 2024-02-12 · No fix listed CWE-352
