CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Essential Marketer Essential Breadcrumbs essential-breadcrumbs allows Privilege Escalation.This issue affects Essential Breadcrumbs: from n/a through <= 1.1.1.
Explanation of Vulnerability in Simple Terms
Essential Breadcrumbs versions 1.1.1 and earlier are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unauthorized actions on the site without the admin's knowledge or consent. This can lead to data modification, deletion, or other harmful changes depending on what actions the plugin exposes.
What an attacker can do
Perform unauthorized actions on the site by tricking an admin into visiting a malicious webpage.
Potential impact on your site
Administrators could unknowingly authorize changes to site content, settings, or data via a malicious link or embedded page.
Conditions required to exploit
Site admin must be logged in and visit a page controlled by the attacker.
Key dates
External resources
