CVE-2015-4677: Cross-site request forgery (CSRF) vulnerability in FiverrScript (aka Fiverr Script) 7.2 allows remote attac...

Security readout for executives and security teams

FiverrScript 7.2 has a CSRF issue that can let an attacker abuse a logged-in administrator's browser to submit a request creating a new admin account. The business risk is unauthorized administrative access if an administrator can be tricked into visiting attacker-controlled content. Exposure is limited to organizations running FiverrScript 7.2 with an accessible administrator interface. Risk depends on whether admins are authenticated, reachable by phishing or browsing attacks, and whether admin creation lacks CSRF validation. Treat this as high priority where FiverrScript 7.2 is internet-facing or still used for business operations. The impact is administrative compromise, but the source bundle does not prove active exploitation or name a vendor patch. Mitigation focus: Confirm whether FiverrScript 7.2 is present in any environment.; Check current vendor or project guidance for fixed versions or recommended remediation.; Restrict administrator interface access to trusted networks or VPN users..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.