CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6.
Explanation of Vulnerability in Simple Terms
Seraphinite Post .DOCX Source versions up to 2.16.6 contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious webpage that, when visited by a logged-in user, performs unwanted actions on their behalf. The vulnerability requires user interaction—the victim must visit the attacker's page while authenticated. Impact is limited to data modification; no data theft or system compromise occurs.
What an attacker can do
Trick a logged-in user into performing unwanted actions (e.g., changing settings or creating content) via a malicious webpage.
Potential impact on your site
Users' accounts can be manipulated to perform unintended actions if they visit malicious sites while logged in.
Conditions required to exploit
User must be logged in and visit an attacker-controlled webpage. No special privileges required.
Key dates
External resources
Related vulnerabilities
