CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in silverplugins217 Product Quantity Dropdown For Woocommerce product-quantity-dropdown-for-woocommerce allows Cross Site Request Forgery.This issue affects Product Quantity Dropdown For Woocommerce: from n/a through <= 1.2.
Explanation of Vulnerability in Simple Terms
The Product Quantity Dropdown For WooCommerce plugin versions 1.2 and earlier contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious link or page that, when visited by a logged-in site administrator, performs unwanted actions on the store without the admin's knowledge or consent. The vulnerability requires user interaction and does not expose sensitive data directly.
What an attacker can do
Trick a logged-in admin into performing unwanted actions on the store via a malicious link or page.
Potential impact on your site
Store admins could unknowingly modify product settings or store configuration if tricked into visiting attacker-controlled pages.
Conditions required to exploit
Admin must visit a malicious link or page while logged into the site.
Key dates
External resources
Related vulnerabilities
