CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Frédéric GILLES FG PrestaShop to WooCommerce, Frédéric GILLES FG Drupal to WordPress, Frédéric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal to WordPress: from n/a through 3.67.0; FG Joomla to WordPress: from n/a through 4.15.0.
Explanation of Vulnerability in Simple Terms
FG PrestaShop to WooCommerce versions up to 4.44.3 are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious link or webpage that, when visited by a site administrator, performs unwanted actions on the site without their knowledge. The vulnerability requires user interaction—the admin must click the link or visit the attacker's page. This can disrupt site availability or cause unintended configuration changes.
What an attacker can do
Trick a site admin into performing unwanted actions via a malicious link or webpage.
Potential impact on your site
Administrators could unknowingly trigger actions that disrupt site availability or alter settings.
Conditions required to exploit
Site admin must click a malicious link or visit an attacker-controlled page while logged in.
Key dates
External resources
Related vulnerabilities
