CVE-2024-9233: GS Logo Slider < 3.7.1 - Settings Update via Cross-Site Request Forgery
The Logo Slider WordPress plugin before 3.7.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9233?
CVE-2024-9233 has a medium severity rating due to the potential for unauthorized administrative changes via CSRF attacks.
How do I fix CVE-2024-9233?
To fix CVE-2024-9233, update the GS Logo Slider WordPress plugin to version 3.7.1 or later.
Who is affected by CVE-2024-9233?
Any WordPress site using the GS Logo Slider plugin versions before 3.7.1 is affected by CVE-2024-9233.
What kind of attack is associated with CVE-2024-9233?
CVE-2024-9233 is associated with cross-site request forgery (CSRF) attacks that can manipulate plugin settings.
What can attackers do with CVE-2024-9233?
Attackers can exploit CVE-2024-9233 to change the settings of the GS Logo Slider plugin if they have access to an authenticated admin session.