CVE-2009-4877: Plainblack Webgui

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors.

Affected products

• Plainblack Webgui: up to and including 7.7.13; version 7.3.12 only; version 7.3.13 only; version 7.3.14 only; version 7.3.15 only; version 7.3.16 only; …

Published 2010-05-26. Last modified 2026-06-16.