CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in rankchecker Rankchecker.io Integration rankchecker-io-integration allows Stored XSS.This issue affects Rankchecker.io Integration: from n/a through <= 1.0.9.
Explanation of Vulnerability in Simple Terms
Rankchecker.io Integration versions up to 1.0.9 are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in user, performs unwanted actions on the user's behalf. The vulnerability affects confidentiality, integrity, and availability of the site. Update to a version newer than 1.0.9 to remediate.
What an attacker can do
Trick a logged-in user into performing unwanted actions (read data, change settings, delete content) via a malicious webpage.
Potential impact on your site
Users' accounts can be compromised to perform actions without their knowledge; data integrity and availability at risk.
Conditions required to exploit
User must be logged in and visit an attacker-controlled webpage or link while authenticated.
Key dates
External resources
Related vulnerabilities
