CSRF Vulnerability in Quicksand Post Filter jQuery Plugin
CVE-2024-24849

8.8HIGH

Key Information:

Vendor

WordPress
Status
Quicksand Post Filter jQuery Plugin
Vendor
CVE Published:
21 February 2024

What is CVE-2024-24849?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Quicksand Post Filter jQuery Plugin developed by Mark Stockton. This flaw affects versions from n/a through 3.1.1, allowing an attacker to trick a user into executing unwanted actions on a web application where they are authenticated. If exploited, this could lead to unauthorized actions being performed on behalf of the user without their consent, posing significant risks to web security.

Affected Version(s)

Quicksand Post Filter jQuery Plugin <= 3.1.1

References

https://patchstack.com/database/vulnerability/quicksand-j...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mika (Patchstack Alliance)
.
CVE-2024-24849 : CSRF Vulnerability in Quicksand Post Filter jQuery Plugin