fs-code

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

fs-code records in CISA KEV

No fs-code vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Booknetic 1 record HIGH

Records

1 record in Booknetic · all components

TI-2024-12193 CVE-2024-13146 · GHSA-xpv6-mc85-j28m

Booknetic < 4.1.5 - Staff Creation via CSRF

HIGH 73

The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0024 Published 2025-03-26 Fixed in 4.1.5 CWE-352

Open these records in search →

Critical	0
High	5
Medium	1
Low	0
No CVSS	0