CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in itmooti Theme My Ontraport Smartform theme-my-ontraport-smartform allows Stored XSS.This issue affects Theme My Ontraport Smartform: from n/a through <= 1.2.11.
Explanation of Vulnerability in Simple Terms
Theme My Ontraport Smartform versions up to 1.2.11 contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without their knowledge. The vulnerability requires user interaction and can affect confidentiality, integrity, and availability of the site.
What an attacker can do
Perform unwanted actions on the site by tricking a logged-in admin into visiting a malicious webpage.
Potential impact on your site
An attacker can modify site settings, create accounts, or change content if an admin visits a malicious link.
Conditions required to exploit
A logged-in site administrator must visit a webpage controlled by the attacker.
Key dates
External resources
Related vulnerabilities
