CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows Cross Site Request Forgery.This issue affects Mailing Group Listserv: from n/a through <= 3.0.5.
Explanation of Vulnerability in Simple Terms
Mailing Group Listserv versions 3.0.5 and earlier are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious link or webpage that, when visited by a logged-in user, performs unwanted actions on the listserv without the user's knowledge. The vulnerability requires user interaction but does not require authentication. Availability impact is high.
What an attacker can do
Perform unwanted actions on the listserv by tricking a logged-in user into visiting a malicious link or page.
Potential impact on your site
Users' listserv accounts can be manipulated to perform actions they did not authorize, potentially disrupting mailing list operations.
Conditions required to exploit
A user must be logged into the listserv and visit an attacker-controlled page or click a malicious link.
Key dates
External resources
