CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Jeff Starr Simple Statistics for Feeds simple-feed-stats allows Cross Site Request Forgery.This issue affects Simple Statistics for Feeds: from n/a through <= 20250322.
Explanation of Vulnerability in Simple Terms
Simple Statistics for Feeds contains a cross-site request forgery (CSRF) vulnerability that allows an attacker to perform unauthorized actions on behalf of a logged-in site administrator. The vulnerability requires the admin to visit a malicious webpage while authenticated. An attacker can modify plugin settings or data, but cannot read sensitive information or cause service disruption.
What an attacker can do
Perform unauthorized actions (like changing plugin settings) on behalf of a logged-in administrator.
Potential impact on your site
Plugin settings could be altered without your knowledge if an admin visits a malicious link while logged in.
Conditions required to exploit
Administrator must be logged in and visit an attacker-controlled webpage.
Key dates
External resources
Related vulnerabilities
