CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in aatmaadhikari APA Register Newsletter Form apa-register-newsletter-form allows SQL Injection.This issue affects APA Register Newsletter Form: from n/a through <= 1.0.0.
Explanation of Vulnerability in Simple Terms
APA Register Newsletter Form versions up to 1.0.0 contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious webpage that, when visited by a site administrator, performs unwanted actions on the newsletter form without the admin's knowledge. The vulnerability requires user interaction and can affect the confidentiality of data and site availability.
What an attacker can do
Trick a site admin into visiting a malicious page that performs unwanted actions on the newsletter form.
Potential impact on your site
Attackers can modify newsletter settings or data without authorization if an admin visits a malicious link.
Conditions required to exploit
Site admin must visit an attacker-controlled webpage while logged into the site.
Key dates
External resources
Related vulnerabilities
