CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") UPC/EAN/GTIN Code Generator upc-ean-barcode-generator allows Cross Site Request Forgery.This issue affects UPC/EAN/GTIN Code Generator: from n/a through <= 2.0.2.
Explanation of Vulnerability in Simple Terms
The UPC/EAN/GTIN Code Generator through version 2.0.2 is vulnerable to cross-site request forgery (CSRF). An attacker can trick a site administrator into performing unintended actions by crafting a malicious link or page. The vulnerability requires the admin to click the link while logged in. No authentication bypass or data theft occurs, but the attacker can modify site settings or data.
What an attacker can do
Trick a logged-in admin into performing unintended actions on the site via a malicious link.
Potential impact on your site
An attacker can modify plugin settings or data if they trick an admin into clicking a crafted link.
Conditions required to exploit
Admin must click a malicious link while logged into the site.
Key dates
External resources
