PatchTheCVEcasebook plugin vulnerabilities and fixes
Recent CVEs affecting casebook plugin, with upgrade or downgrade steps. 6 tracked.
Also searched as: casebookplugin.
casebook plugin has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2016-04-06. Highest priority: CVE-2016-1174 (score 43/100).
- CVE-2016-1174 HIGH 8.8 UPGRADE Cross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote
- CVE-2016-1173 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attack
- CVE-2016-1172 HIGH 8.8 UPGRADE Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote
- CVE-2016-1171 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attacke
- CVE-2016-1170 HIGH 8.8 UPGRADE Cross-site request forgery (CSRF) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote
- CVE-2016-1169 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attack
FAQ
How do I fix casebook plugin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is casebook plugin being exploited right now?
None of the tracked casebook plugin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which casebook plugin CVE should I patch first?
CVE-2016-1174 currently ranks highest (43/100): Cross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote.