CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
What the vulnerability does
Server-Side Request Forgery (SSRF) vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Server Side Request Forgery.This issue affects Prime Slider – Addons For Elementor: from n/a through <= 4.0.10.
Explanation of Vulnerability in Simple Terms
Prime Slider – Addons For Elementor versions up to 4.0.10 contain a server-side request forgery vulnerability. An authenticated attacker with low privileges can make the site send HTTP requests to internal or external systems on their behalf. The vulnerability requires high attack complexity but can affect confidentiality and integrity of data accessed through those requests.
What an attacker can do
Make the site send HTTP requests to internal systems or external URLs to read or modify data.
Potential impact on your site
Authenticated users can exploit this to access internal services, read sensitive data, or perform actions on behalf of the site.
Conditions required to exploit
Attacker must have a low-privilege account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
