CVE-2023-0762 (published 2023-05-15T12:15:32.523Z)
The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting designations, which could allow attackers to make logged in admins delete arbitrary designations via a CSRF attack
Affected products: Vendor: Unknown
Product: Clock In Portal- Staff & Attendance Management
Versions: 0