CVE-2025-24622

Summary

CVE-2025-24622 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Job Board Manager, a component of PickPlugins, from version n/a to 2.1.59. Hackers can exploit this issue to conduct unauthorized actions on a victim's behalf, potentially leading to data modifications or unintended functionality changes within the targeted Job Board Manager installation. A successful CSRF attack relies on the attacker's ability to trick a user into visiting a malicious website or clicking a crafted link, enabling the attacker to submit malicious requests on the victim's behalf. Organizations running affected Job Board Manager versions should prioritize updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.