CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Stormhill Media MyBookTable Bookstore by Stormhill Media allows Cross Site Request Forgery.This issue affects MyBookTable Bookstore by Stormhill Media: from n/a through 3.3.4.
Explanation of Vulnerability in Simple Terms
MyBookTable Bookstore by Stormhill Media versions up to 3.3.4 contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the bookstore without the admin's knowledge or consent. The vulnerability requires the victim to visit the attacker's page while authenticated.
What an attacker can do
Perform unwanted actions on the bookstore (such as modifying settings or data) on behalf of a logged-in administrator.
Potential impact on your site
An attacker can trick your administrators into unknowingly changing bookstore settings or data by visiting a crafted link.
Conditions required to exploit
A logged-in site administrator must visit a malicious webpage controlled by the attacker.
Key dates
External resources
Related vulnerabilities
