CVE-2023-36687

MediumCVSS 5.4

Published: 11/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

CSRF vulnerability in Andrea Tarantini's Menubar plugin versions <= 5.8.2 allows attackers to perform unauthorized actions on behalf of users.

Organizations using this plugin may be exposed to unauthorized operations, potentially leading to data loss or security breaches.

It is recommended to update the Menubar plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) vulnerability in Andrea Tarantini Menubar plugin <= 5.8.2 versions.