CVE-2011-5298

no score yetEPSS 0.6%

Multiple cross-site request forgery (CSRF) vulnerabilities in Argyle Social 2011-04-26 allow remote attackers to hijack the authentication of administrators for requests that (1) modify credentials via the role parameter to users/create/, (2) modify rules via the terms field in stream_filter_rule JSON data to settings-ajax/stream_filter_rules/create, or (3) modify efforts via the title field in effort JSON data to publish-ajax/efforts/create.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2015-01-01
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

viralheat:argyle_social

References

https://www.htbridge.com/advisory/HTB22978
https://www.htbridge.com/advisory/HTB22978

Check your stack JSON