CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in realmag777 HUSKY – Products Filter for WooCommerce (formerly WOOF).This issue affects HUSKY – Products Filter for WooCommerce (formerly WOOF): from n/a through 1.3.5.1.
Explanation of Vulnerability in Simple Terms
HUSKY – Products Filter for WooCommerce versions up to 1.3.5.1 are vulnerable to cross-site request forgery (CSRF). An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the plugin without their knowledge. The vulnerability requires user interaction but does not require authentication.
What an attacker can do
Perform unwanted actions on the plugin by tricking a logged-in admin into visiting a malicious webpage.
Potential impact on your site
An attacker could modify plugin settings or perform other administrative actions if an admin visits a malicious link.
Conditions required to exploit
A logged-in site administrator must visit a webpage controlled by the attacker.
Key dates
External resources
Related vulnerabilities
