CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
What the vulnerability does
Server-Side Request Forgery (SSRF) vulnerability in TheInnovs ElementsCSS Addons for Elementor css-for-elementor allows Server Side Request Forgery.This issue affects ElementsCSS Addons for Elementor: from n/a through <= 1.0.8.9.
Explanation of Vulnerability in Simple Terms
ElementsCSS Addons for Elementor versions up to 1.0.8.9 contain a server-side request forgery vulnerability. An attacker can make the site send HTTP requests to internal or external systems on the attacker's behalf. The vulnerability requires specific network conditions to exploit but can leak sensitive information or interact with internal services.
What an attacker can do
Make your site send HTTP requests to internal systems or external URLs to read data or interact with services.
Potential impact on your site
Attackers could read internal service responses, access metadata services, or interact with backend systems your site connects to.
Conditions required to exploit
Network access to the site; specific network conditions required (high attack complexity).
Key dates
External resources
Related vulnerabilities
