CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Black and White BookPress – For Book Authors book-press allows Cross-Site Scripting (XSS).This issue affects BookPress – For Book Authors: from n/a through <= 1.2.7.
Explanation of Vulnerability in Simple Terms
BookPress – For Book Authors versions 1.2.7 and earlier contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without the admin's knowledge or consent. The vulnerability affects confidentiality, integrity, and availability of the site.
What an attacker can do
Perform unwanted actions on the site by tricking a logged-in admin into visiting a malicious webpage.
Potential impact on your site
An attacker can modify site content, settings, or user accounts by exploiting an admin's active session.
Conditions required to exploit
A site admin must be logged in and visit a page controlled by the attacker.
Key dates
External resources
Related vulnerabilities
