CVE-2025-24636

Summary

CVE-2025-24636 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the MachForm Shortcode developed by Laymance Technologies LLC. The issue allows an attacker to execute Stored Cross-Site Scripting (XSS) attacks on unsuspecting users. This means an attacker can inject malicious scripts into a website, which are then executed in the users' web browsers when they view a manipulated page. MachForm Shortcode versions from n/a through 1.4.1 are susceptible to this vulnerability. Users of these versions are advised to update to the latest, secure version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.