Cross-Site Request Forgery

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users.CVE-2022-47132Creativeitem · 0.9% likely

   CWE-352

2. A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the C…CVE-2022-47130Creativeitem · CVSS 4.3 · 0.6% likely

   CWE-352

3. A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page.CVE-2022-47131Creativeitem · CVSS 4.8 · 0.4% likely

   CWE-352

4. Neoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's Settings to be changed (such as Payment Settings)CVE-2020-22273Creativeitem · 0.4% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.