CVE-2024-24837

Summary

CVE-2024-24837 represents a Cross-Site Request Forgery (CSRF) vulnerability affecting multiple applications, including FG PrestaShop to WooCommerce (versions 4.44.3 and older), FG Drupal to WordPress (versions n/a through 3.67.0), and FG Joomla to WordPress (versions n/a through 4.15.0). This issue allows malicious actors to manipulate user sessions, potentially leading to unauthorized actions such as data modification or account takeover. Users are advised to apply the necessary patches or updates to mitigate the risk associated with this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.