CVE-2024-54331
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2024-54331 is a newly disclosed vulnerability affecting the Micha I Plant A Tree software. The issue involves a Cross-Site Request Forgery (CSRF) vulnerability that also includes Stored XSS (Cross-Site Scripting) capabilities. This combination of vulnerabilities allows attackers to execute malicious scripts in the context of other users, potentially leading to unauthorized actions or data theft. The affected versions of Micha I Plant A Tree span from n/a through 1.7.3, and users are urged to upgrade to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.