Cross-Site Request Forgery Vulnerability in Stormhill Media MyBookTable Bookstore
CVE-2025-22301

5.4MEDIUM

Key Information:

Vendor
WordPress
Status
Mybooktable Bookstore
Vendor
CVE Published:
7 January 2025

Summary

A CSRF vulnerability has been identified in the Stormhill Media MyBookTable Bookstore, allowing unauthorized actions to be performed on behalf of an authenticated user. This vulnerability impacts all versions of MyBookTable Bookstore from its initial release through 3.5.3. Attackers could exploit this vulnerability by tricking users into clicking malicious links, thereby executing unwanted commands within the application without their consent.

Affected Version(s)

MyBookTable Bookstore <= 3.5.3

References

https://patchstack.com/database/wordpress/plugin/mybookta...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dhabaleshwar Das (Patchstack Alliance)
.