{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2019/JVNDB-2019-000034.html",
  "dc:date": "2019-10-01T10:56+09:00",
  "dcterms:issued": "2019-06-10T15:31+09:00",
  "dcterms:modified": "2019-10-01T10:56+09:00",
  "description": "WordPress Plugin \"Attendance Manager\" provided by SUKIMALAB.COM contains multiple vulnerabilities listed below. \r\n* Stored cross-site scripting vulnerability (CWE-79) - CVE-2019-5970\r\n* Cross-site request forgery vulnerability (CWE-352) - CVE-2019-5971\r\n\r\nNatsumi Matsuoka of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University directly reported these vulnerabilities to the developer and coordinated on her own.\r\n After coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2019/JVNDB-2019-000034.html",
  "sec:cpe": {
    "#text": "cpe:/a:sukimalab:attendance_manager",
    "@product": "Attendance Manager",
    "@vendor": "SUKIMALAB.COM",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "2.6",
      "@severity": "Low",
      "@type": "Base",
      "@vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "6.1",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2019-000034",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN95685939/index.html",
      "@id": "JVN#95685939",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5970",
      "@id": "CVE-2019-5970",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5971",
      "@id": "CVE-2019-5971",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2019-5970",
      "@id": "CVE-2019-5970",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2019-5971",
      "@id": "CVE-2019-5971",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-352",
      "@title": "Cross-Site Request Forgery(CWE-352)"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-79",
      "@title": "Cross-site Scripting(CWE-79)"
    }
  ],
  "title": "Multiple vulnerabilities in WordPress Plugin \"Attendance Manager\""
}