CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Kunal Shivale Global Meta Keyword & Description global-meta-keyword-and-description allows Stored XSS.This issue affects Global Meta Keyword & Description: from n/a through <= 2.3.
Explanation of Vulnerability in Simple Terms
Global Meta Keyword & Description versions 2.3 and earlier contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious link or page that, when visited by a logged-in site administrator, performs unauthorized actions on the site without the admin's knowledge or consent. The vulnerability affects the plugin's settings and configuration.
What an attacker can do
Trick a site admin into visiting a malicious page that changes plugin settings or configuration without their consent.
Potential impact on your site
An attacker can modify plugin settings, metadata, or other configurations if they trick an admin into visiting a malicious page.
Conditions required to exploit
Site admin must be logged in and visit an attacker-controlled page or click a malicious link.
Key dates
External resources
Related vulnerabilities
