CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in DexignZone JobZilla - Job Board WordPress Theme jobzilla allows Privilege Escalation.This issue affects JobZilla - Job Board WordPress Theme: from n/a through <= 2.0.
Explanation of Vulnerability in Simple Terms
JobZilla theme versions 2.0 and earlier contain a cross-site request forgery (CSRF) vulnerability that allows attackers to perform unauthorized actions on behalf of site administrators. An attacker can craft a malicious link or page that, when visited by an admin, executes unwanted changes to the site. This affects all administrative functions protected only by session cookies.
What an attacker can do
Perform unauthorized administrative actions on the site by tricking an admin into visiting a malicious page.
Potential impact on your site
Attackers can modify site settings, create accounts, delete content, or install malicious code if an admin visits a compromised page.
Conditions required to exploit
An administrator must visit a page controlled by the attacker while logged into WordPress.
Key dates
External resources
Related vulnerabilities
