CVE-2024-2232 The lacks CSRF checks allowing a user to invite any user to any group (including private groups)

Description

The lacks CSRF checks allowing a user to invite any user to any group (including private groups)

Affected products and versions

Product	Affected versions	Fixed in
Himer 2.1	earliest → < 2.1.3	2.1.3
himer 2.1	earliest → < 2.1.3	2.1.3

Other CVEs of Himer

The 7 CVEs of Himer →

CVE-2024-2233 The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make… 6.3 Medium CVE-2024-2234 The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high… 6.3 Medium CVE-2024-2235 The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make… 6.3 Medium CVE-2024-2231 The allows any authenticated user to join a private group due to a missing authorization check on a function 6.5 Medium