CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in bundgaard Martins Free Monetized Ad Exchange Network martins-free-and-easy-ad-network-get-more-visitors allows Reflected XSS.This issue affects Martins Free Monetized Ad Exchange Network: from n/a through <= 1.0.6.
Explanation of Vulnerability in Simple Terms
Martins Free Monetized Ad Exchange Network versions up to 1.0.6 contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the ad network without the admin's knowledge or consent. The vulnerability requires user interaction and can affect confidentiality, integrity, and availability of the system.
What an attacker can do
Perform unwanted actions on the ad network by tricking a logged-in admin into visiting a malicious webpage.
Potential impact on your site
An attacker can modify ad network settings, steal data, or disrupt service by exploiting admin sessions without their knowledge.
Conditions required to exploit
Admin must be logged in and visit an attacker-controlled webpage; no special privileges or complex setup required.
Key dates
External resources
