CVE-2025-31572

Summary

CVE-2025-31572 is a Cross-Site Request Forgery (CSRF) vulnerability affecting versions n/a through 1.1.3 of the v20202020 Multi Days Events and Multi Events in One Day Calendar. This issue grants attackers the ability to make unauthorized requests on behalf of a user, potentially leading to data manipulation or unintended actions. The CSRF vulnerability is a common security threat, allowing an attacker to trick a user into making unwanted actions on a website they are already logged into. Users are encouraged to upgrade to the latest version of the calendar software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.