CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in snagysandor Parallax Scrolling Enllax.js parallax-scrolling-enllax-js allows Cross Site Request Forgery.This issue affects Parallax Scrolling Enllax.js: from n/a through <= 0.0.6.
Explanation of Vulnerability in Simple Terms
Enlax.js versions 0.0.6 and earlier are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a site administrator, performs unwanted actions on the site without their knowledge. The vulnerability requires the victim to visit the attacker's page while logged into a site using the affected library.
What an attacker can do
Perform unwanted actions on a site by tricking a logged-in user into visiting a malicious webpage.
Potential impact on your site
Site administrators could unknowingly perform actions (like changing settings or creating content) if tricked into visiting a malicious page.
Conditions required to exploit
The victim must be logged in and visit an attacker-controlled webpage while using the affected Enlax.js version.
Key dates
External resources
Related vulnerabilities
