CVE-2024-37452
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 2, 2025
CWE ID 352
Summary
CVE-2024-37452 is a Cross-Site Request Forgery (CSRF) vulnerability affecting MyThemeShop's Schema Lite. Hackers can exploit this issue to perform unintended actions on a victim's website. The vulnerability exists in all versions of Schema Lite, from the initial release through 1.2.2. Successful exploitation of this CSRF vulnerability could lead to unauthorized changes or actions in the affected website. Users are advised to update to the latest version of Schema Lite, or consider alternative solutions, to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.