CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics: from n/a through 3.1.
Explanation of Vulnerability in Simple Terms
Tagbox versions up to 3.1 contain a cross-site request forgery (CSRF) vulnerability that allows attackers to perform unauthorized actions on behalf of site visitors. An attacker can craft a malicious link or page that, when visited by a logged-in user, triggers unwanted changes to site settings or data. The vulnerability requires user interaction but does not require authentication.
What an attacker can do
Trick a site visitor into performing unwanted actions, such as modifying settings or deleting data, without their knowledge.
Potential impact on your site
Visitors' accounts can be used to make unauthorized changes to your site's configuration or content without their consent.
Conditions required to exploit
A site visitor must click a malicious link or visit an attacker-controlled page while logged into the site.
Key dates
External resources
Related vulnerabilities
