CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.5.
Explanation of Vulnerability in Simple Terms
The Awesome Support plugin for WordPress contains a cross-site request forgery (CSRF) vulnerability that allows attackers to perform unauthorized actions on behalf of site administrators. An attacker can craft a malicious link or page that, when visited by an admin, executes unintended operations within the plugin. No authentication is required from the attacker, but the admin must click the link or visit the page. This could lead to unauthorized changes to support ticket settings or other plugin configurations.
What an attacker can do
Trick an admin into clicking a link that performs unauthorized actions in the plugin without the admin's knowledge.
Potential impact on your site
An attacker can modify plugin settings or support ticket data by tricking your admin into visiting a malicious page.
Conditions required to exploit
Admin must visit a malicious page or click an attacker-controlled link while logged into WordPress.
Key dates
External resources
Related vulnerabilities
