01 Record

CVE-2025-10308

Astro Booking Engine <= 1.4.0 - Cross-Site Request Forgery to Settings Reset

MediumPUBLISHEDCNA: Wordfence

Base score4.3 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

02 Description

Astro Booking Engine <= 1.4.0 - Cross-Site Request Forgery to Settings Reset

Published: 2026-08-14 04:26Z14 HR AGO
Last updated: 2026-08-14 04:26Z14 HR AGO
Reserved: 2025-09-11
Assigning CNA: Wordfence
Record state: PUBLISHED
Severity: Medium (CVSS 4.3)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weaknesses: CWE-352
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: cb2a8718e9232a75fd50f4f81be0fee8b3924815afd0f81c28c93f47e654741d

VendorProductVersionsPlatforms