Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php.
Threat-Mapped Scoring
Score: 0.0
Priority: Unclassified
EPSS
Score: 0.00689Percentile:
0.70825
CVSS Scoring
CVSS v3.1 Score: 6.5
Severity: MEDIUM
Mapped CWE(s)
CWE-352
: Cross-Site Request Forgery (CSRF)
All CAPEC(s)
CAPEC-111 : JSON Hijacking (aka JavaScript Hijacking)
CAPEC-462 : Cross-Domain Search Timing
CAPEC-467 : Cross Site Identification
CAPEC-62 : Cross Site Request Forgery
CAPEC(s) with Mapped TTPs
Mapped ATT&CK TTPs
Affected Products
cpe:2.3:a:helpcenterlive:help_center_live:-:*:*:*:*:*:*:*
← Back to Home
BrownCoat Threat Intelligence Platform | 2025 Steve Gray — You Can’t Take the Sky from Me