title: Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbTheme
description: Cross-Site Request Forgery (CSRF) vulnerability in KlbTheme Clotya theme, KlbTheme Cosmetsy theme, KlbTheme Furnob theme, KlbTheme Bacola theme, KlbTheme Partdo theme, KlbTheme Medibazar theme, KlbTheme Machic theme.This issue affects Clotya theme: from n/a through 1.1.6; Cosmetsy theme: from n/a through 1.7.7; Furnob theme: from n/a through 1.2.2; Bacola theme: from n/a through 1.3.3; Partdo theme: from n/a through 1.1.1; Medibazar theme: from n/a through 1.8.6; Machic theme: from n/a through 1.2.8.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
defaultStatus: unaffected
product: Clotya theme
vendor: KlbTheme
versions:
lessThanOrEqual: 1.1.6, status: affected, version: n/a, versionType: custom
}
{
defaultStatus: unaffected
product: Cosmetsy theme
vendor: KlbTheme
versions:
lessThanOrEqual: 1.7.7, status: affected, version: n/a, versionType: custom
}
{
defaultStatus: unaffected
product: Furnob theme
vendor: KlbTheme
versions:
lessThanOrEqual: 1.2.2, status: affected, version: n/a, versionType: custom
}
{
defaultStatus: unaffected
product: Bacola theme
vendor: KlbTheme
versions:
lessThanOrEqual: 1.3.3, status: affected, version: n/a, versionType: custom
}
{
defaultStatus: unaffected
product: Partdo theme
vendor: KlbTheme
versions:
lessThanOrEqual: 1.1.1, status: affected, version: n/a, versionType: custom
}
{
defaultStatus: unaffected
product: Medibazar theme
vendor: KlbTheme
versions:
lessThanOrEqual: 1.8.6, status: affected, version: n/a, versionType: custom
}
{
defaultStatus: unaffected
product: Machic theme
vendor: KlbTheme
versions:
lessThanOrEqual: 1.2.8, status: affected, version: n/a, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL