CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Blackbam TinyMCE Advanced qTranslate fix editor problems tinymce-advanced-qtranslate-fix-editor-problems allows Stored XSS.This issue affects TinyMCE Advanced qTranslate fix editor problems: from n/a through <= 1.0.0.
Explanation of Vulnerability in Simple Terms
TinyMCE Advanced qTranslate fix editor problems contains a cross-site request forgery (CSRF) vulnerability that allows an attacker to perform unauthorized actions on behalf of a logged-in site administrator. The vulnerability requires the administrator to visit a malicious webpage while authenticated. An attacker can modify site content, settings, or other data depending on the editor's permissions.
What an attacker can do
Perform unauthorized actions on the site (modify content, settings) on behalf of a logged-in administrator.
Potential impact on your site
An attacker can trick your admin into modifying site content or settings without their knowledge.
Conditions required to exploit
Administrator must be logged in and visit an attacker-controlled webpage.
Key dates
External resources
Related vulnerabilities
