CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through <= 1.0.9.
Explanation of Vulnerability in Simple Terms
Ultimate Coming Soon & Maintenance versions 1.0.9 and earlier are vulnerable to cross-site request forgery (CSRF). An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without the admin's knowledge or consent. The attacker needs the admin to click a link or visit a page they control.
What an attacker can do
Perform unwanted actions on the site by tricking an admin into visiting a malicious webpage.
Potential impact on your site
An attacker can modify site settings or content if they trick your admin into clicking a malicious link.
Conditions required to exploit
Site admin must be logged in and visit a page controlled by the attacker.
Key dates
External resources
Related vulnerabilities
