CSRF Vulnerability in Book Landing Page
CVE-2024-37230

8.8HIGH

Key Information:

Vendor
WordPress
Status
Book Landing Page
Vendor
CVE Published:
21 June 2024

Summary

The vulnerability presents a Cross-Site Request Forgery (CSRF) issue in the Book Landing Page theme developed by Rara Themes. This allows attackers to trick users into executing unwanted actions on the web application without their consent. Affected versions include all releases from n/a up to 1.2.3, highlighting the need for users to apply necessary security patches and updates to mitigate potential exploitation of this vulnerability.

Affected Version(s)

Book Landing Page <= 1.2.3

References

https://patchstack.com/database/vulnerability/book-landin...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dhabaleshwar Das (Patchstack Alliance)
.