CVE-2024-25572

2024-04-1102:29:38

jpcert

github.com

csrf

ninja forms

3.4.31

cross-site request forgery

vulnerability

6.9 Medium

AI Score

Confidence

Low

JSON

Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page while logging in, unintended operations may be performed.

CNA Affected

[
  {
    "vendor": "Saturday Drive",
    "product": "Ninja Forms",
    "versions": [
      {
        "version": "prior to 3.4.31",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN50361500/

ninjaforms.com/

wordpress.org/plugins/ninja-forms/

6.9 Medium

AI Score

Confidence

Low

JSON

Related for VULNRICHMENT:CVE-2024-25572