CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Cross Site Request Forgery.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through <= 1.11.0.
Explanation of Vulnerability in Simple Terms
Barcode Scanner with Inventory & Order Manager versions 1.11.0 and earlier are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions such as modifying inventory records or creating unauthorized orders. The vulnerability requires user interaction—the admin must visit the attacker's page while authenticated.
What an attacker can do
Trick a logged-in admin into performing unwanted actions like modifying inventory or creating orders.
Potential impact on your site
Unauthorized changes to inventory, orders, or settings if an admin visits a malicious link while logged in.
Conditions required to exploit
Admin must visit attacker's malicious webpage while logged into the site.
Key dates
External resources
Related vulnerabilities
