CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in lisensee NetInsight Analytics Implementation Plugin netinsight-analytics-implementation-plugin allows Stored XSS.This issue affects NetInsight Analytics Implementation Plugin: from n/a through <= 1.0.3.
Explanation of Vulnerability in Simple Terms
The NetInsight Analytics Implementation Plugin versions 1.0.3 and earlier are vulnerable to cross-site request forgery (CSRF). An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without the administrator's knowledge. The vulnerability requires user interaction and can affect confidentiality, integrity, and availability of the site.
What an attacker can do
Perform unwanted actions on the site by tricking a logged-in admin into visiting a malicious webpage.
Potential impact on your site
An attacker can modify site settings, create accounts, or alter data by exploiting admin sessions without explicit consent.
Conditions required to exploit
A logged-in site administrator must visit a webpage controlled by the attacker.
Key dates
External resources
