CVE-2024-25572

Summary

Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page while logging in, unintended operations may be performed.

Affected Software

Weaknesses

• Cross-site request forgery (CSRF)

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://wordpress.org/plugins/ninja-forms/
• https://ninjaforms.com/
• https://jvn.jp/en/jp/JVN50361500/

References

• https://wordpress.org/plugins/ninja-forms/
• https://ninjaforms.com/
• https://jvn.jp/en/jp/JVN50361500/

• ←Previous
• Next→