CVE-2024-2232 The lacks CSRF checks allowing a user to invite any user to any group (including private groups)

Description

The lacks CSRF checks allowing a user to invite any user to any group (including private groups)

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Himer 2.1	premières → < 2.1.3	2.1.3
himer 2.1	premières → < 2.1.3	2.1.3

Autres CVE de Himer

Les 7 CVE de Himer →

CVE-2024-2233 The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make… 6.3 Moyenne CVE-2024-2234 The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high… 6.3 Moyenne CVE-2024-2235 The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make… 6.3 Moyenne CVE-2024-2231 The allows any authenticated user to join a private group due to a missing authorization check on a function 6.5 Moyenne