CSRF Vulnerability in Email Before Download

CVE-2024-23519

Summary

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Email Before Download plugin developed by M&S Consulting. This security flaw may allow unauthorized commands to be transmitted from a user’s browser without their consent when they are authenticated. Users who interact with compromised sites or malicious links could have their actions manipulated, leading to potential exposure of sensitive data. It is crucial for users of Email Before Download versions from n/a to 6.9.7 to apply necessary updates and security measures to mitigate this risk.

References