CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Ritesh Sanap Advanced What should we write next about advanced-what-should-we-write-about-next allows Stored XSS.This issue affects Advanced What should we write next about: from n/a through <= 1.0.3.
Explanation of Vulnerability in Simple Terms
Advanced What should we write next about versions up to 1.0.3 contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious webpage that, when visited by a logged-in user, performs unwanted actions on their behalf. The vulnerability requires user interaction and can affect confidentiality, integrity, and availability of the site.
What an attacker can do
Perform unwanted actions on behalf of a logged-in user by tricking them into visiting a malicious webpage.
Potential impact on your site
Users' accounts can be compromised to perform actions without their knowledge or consent.
Conditions required to exploit
User must be logged in and visit an attacker-controlled webpage or link.
Key dates
External resources
Related vulnerabilities
