CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in stesvis Frontpage category filter frontpage-category-filter allows Cross Site Request Forgery.This issue affects Frontpage category filter: from n/a through <= 1.0.2.
Explanation of Vulnerability in Simple Terms
The Frontpage category filter contains a cross-site request forgery (CSRF) vulnerability affecting versions up to 1.0.2. An attacker can craft a malicious link or page that, when visited by a logged-in site administrator, performs unwanted actions on the site without their knowledge. The vulnerability requires user interaction and does not expose sensitive data, but can modify site content or settings.
What an attacker can do
Trick a site admin into performing unwanted actions (like changing settings or content) by visiting a malicious link.
Potential impact on your site
An attacker can modify site settings or content if they trick an admin into visiting a malicious page while logged in.
Conditions required to exploit
Site admin must be logged in and visit an attacker-controlled page or click a malicious link.
Key dates
External resources
Related vulnerabilities
