CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
What the vulnerability does
The Broken Link Notifier plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.3.0 via broken links that are later exported. This makes it possible for authenticated attackers, with Contributor-level access and above, to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration.
Explanation of Vulnerability in Simple Terms
Broken Link Notifier versions 1.3.0 and earlier contain an integrity issue that allows a low-privileged user to modify content when they visit a malicious link. The vulnerability requires user interaction and affects the scope beyond the vulnerable component. No confidentiality or availability impact occurs.
What an attacker can do
Modify site content if a low-privileged user clicks a malicious link.
Potential impact on your site
Site content could be altered by attackers targeting low-privilege users.
Conditions required to exploit
Low-privilege account access; victim must click attacker-supplied link.
Key dates
External resources
Related vulnerabilities
