CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Razon Komar Pal Linked Variation for WooCommerce linked-variation-for-woocommerce allows Cross Site Request Forgery.This issue affects Linked Variation for WooCommerce: from n/a through <= 1.0.5.
Explanation of Vulnerability in Simple Terms
Linked Variation for WooCommerce versions up to 1.0.5 contain a cross-site request forgery vulnerability. An attacker can trick a site administrator into performing unintended actions by visiting a malicious webpage. The vulnerability requires the admin to be logged in and click a link or visit a page controlled by the attacker. This can lead to unauthorized changes to product settings or other administrative functions.
What an attacker can do
Trick a logged-in admin into making unintended changes to product settings or site configuration.
Potential impact on your site
An attacker can modify product variations or settings without your knowledge if you visit a malicious link while logged in.
Conditions required to exploit
Admin must be logged in and visit a page or click a link controlled by the attacker.
Key dates
External resources
Related vulnerabilities
