CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in tryinteract Interact: Embed A Quiz On Your Site interact-quiz-embed allows Cross Site Request Forgery.This issue affects Interact: Embed A Quiz On Your Site: from n/a through <= 3.1.
Explanation of Vulnerability in Simple Terms
Interact: Embed A Quiz On Your Site versions 3.1 and earlier contain a cross-site request forgery (CSRF) vulnerability. An attacker can craft a malicious webpage that, when visited by a site administrator, performs unwanted actions on the quiz plugin without the admin's knowledge. The vulnerability requires user interaction—the admin must visit the attacker's page—and affects only the integrity of data, not confidentiality or availability.
What an attacker can do
Trick a site admin into performing unwanted actions on the quiz plugin by visiting a malicious webpage.
Potential impact on your site
An attacker can modify quiz settings or content if they trick your admin into clicking a malicious link.
Conditions required to exploit
Site admin must visit an attacker-controlled webpage while logged into the WordPress site.
Key dates
External resources
Related vulnerabilities
