CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in DigiTimber DigiTimber cPanel Integration digitimber-cpanel-integration allows Stored XSS.This issue affects DigiTimber cPanel Integration: from n/a through <= 1.4.6.
Explanation of Vulnerability in Simple Terms
DigiTimber cPanel Integration versions 1.4.6 and earlier are vulnerable to cross-site request forgery (CSRF). An attacker can craft a malicious webpage that, when visited by a logged-in administrator, performs unauthorized actions on the cPanel integration without the administrator's knowledge. The vulnerability affects confidentiality, integrity, and availability of the integration.
What an attacker can do
Perform unauthorized actions on the cPanel integration by tricking an admin into visiting a malicious webpage.
Potential impact on your site
An attacker can modify cPanel settings, access sensitive data, or disrupt service by exploiting admin sessions.
Conditions required to exploit
Administrator must be logged in and visit an attacker-controlled webpage or link.
Key dates
External resources
Related vulnerabilities
