CVE-2024-56251
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 2, 2025
CWE ID 352
Summary
CVE-2024-56251 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Event Espresso 4 Decaf. This issue permits an attacker to manipulate user actions on a vulnerable website, potentially leading to unintended changes or actions. Affected versions of Event Espresso 4 Decaf range from the initial release through 5.0.28.decaf. Users are advised to update their software as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.