CVE-2023-0763 (published 2023-05-15T12:15:37.541Z)
The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting Holidays, which could allow attackers to make logged in admins delete arbitrary holidays via a CSRF attack
Affected products: Vendor: Unknown
Product: Clock In Portal- Staff & Attendance Management
Versions: 0