CVE-2024-25572

Publication date

2024-04-11 02:29:38

Family

jpcert

State

PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page while logging in, unintended operations may be performed.