CVE-2024-25418

Summary

CVE-2024-25418: A new vulnerability has been identified in flusity-CMS version 2.33. Hackers can exploit a Cross-Site Request Forgery (CSRF) issue found in the /core/tools/delete_menu.php component to execute malicious actions on behalf of an unsuspecting user. This vulnerability poses a significant threat to website security, allowing unauthorized modifications or deletions of content. It is recommended that users upgrade to the latest version of flusity-CMS to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.