Cross-Site Request Forgery Vulnerability in i-transform by Marsian
CVE-2024-38764

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
I-transform
Vendor
CVE Published:
2 January 2025

What is CVE-2024-38764?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the i-transform product by Marsian. This flaw allows an attacker to trick a user into executing unwanted actions on a web application in which they are currently authenticated. Affected versions include all prior to 3.0.9, where malicious actors could potentially use this exploit to compromise user sessions, manipulate user data, or perform unauthorized actions, thereby endangering the overall integrity and confidentiality of user information.

Affected Version(s)

i-transform <= 3.0.9

References

https://patchstack.com/database/wordpress/theme/i-transfo...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dhabaleshwar Das (Patchstack Alliance)
.