CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager pixelyoursite allows Cross Site Request Forgery.This issue affects PixelYourSite – Your smart PIXEL (TAG) Manager: from n/a through <= 10.0.1.2.
Explanation of Vulnerability in Simple Terms
PixelYourSite versions up to 10.0.1.2 contain a cross-site request forgery (CSRF) vulnerability that allows attackers to perform unwanted actions on behalf of site administrators. An attacker can craft a malicious link or page that, when visited by an admin, triggers unintended changes to site settings or data. The vulnerability requires user interaction—the admin must click the link or visit the attacker's page—but no authentication bypass is needed since the admin is already logged in.
What an attacker can do
Trick a logged-in admin into performing unwanted actions like changing plugin settings or modifying site configuration.
Potential impact on your site
Attackers can alter PixelYourSite settings or configuration without your knowledge if an admin visits a compromised page.
Conditions required to exploit
Admin must visit a malicious link or page while logged into the site.
Key dates
External resources
Related vulnerabilities
