CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in artiosmedia Product Code for WooCommerce product-code-for-woocommerce allows Cross Site Request Forgery.This issue affects Product Code for WooCommerce: from n/a through <= 1.5.0.
Explanation of Vulnerability in Simple Terms
Product Code for WooCommerce versions up to 1.5.0 contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious link or webpage that, when visited by a logged-in site administrator, performs unwanted actions on the WooCommerce store without the admin's knowledge or consent. The vulnerability requires user interaction and does not expose sensitive data, but can modify site settings or data.
What an attacker can do
Trick a logged-in admin into performing unwanted actions on the WooCommerce store via a malicious link or webpage.
Potential impact on your site
An attacker can modify WooCommerce settings or data if they trick your admin into clicking a malicious link.
Conditions required to exploit
Admin must visit a malicious link or webpage while logged into the WooCommerce site.
Key dates
External resources
