CVE-2025-24713

Summary

CVE-2025-24713 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Button Generator – easily Button Builder from versions n/a to 3.1.1. Malicious actors can exploit this issue to execute unintended actions on a user's behalf, potentially leading to data manipulation or unauthorized actions within the application. This vulnerability arises due to insufficient CSRF protection in the application, allowing for unauthorized requests to be made on behalf of a user. Successful exploitation requires the attacker to have some level of knowledge of the target user's session, increasing the risk for sensitive data exposure or unauthorized modifications. Users are advised to upgrade to the latest version of Button Generator – easily Button Builder to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.