CVE-2024-37412
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 2, 2025
CWE ID 352
Summary
CVE-2024-37412 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Blossom Shop, a plugin used by Blossom Themes. The flaw enables malicious actors to execute unintended actions on a user's behalf, potentially leading to data manipulation or unauthorized transactions. This issue impacts Blossom Shop versions from n/a through 1.1.7, making it essential for users to apply the available patch to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.