CSRF Vulnerability in Quicksand Post Filter jQuery Plugin
CVE-2024-24849
8.8HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 21 February 2024
What is CVE-2024-24849?
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Quicksand Post Filter jQuery Plugin developed by Mark Stockton. This flaw affects versions from n/a through 3.1.1, allowing an attacker to trick a user into executing unwanted actions on a web application where they are authenticated. If exploited, this could lead to unauthorized actions being performed on behalf of the user without their consent, posing significant risks to web security.
Affected Version(s)
Quicksand Post Filter jQuery Plugin <= 3.1.1