CVE-2024-52451

HIGH Year: 2024
CVSS v3 Score
8.2
High
Weakness Type
CWE-352
View all →

Vulnerability Description

Cross-Site Request Forgery (CSRF) vulnerability in Aaron Robbins Post Ideas allows SQL Injection.This issue affects Post Ideas: from n/a through 2.

Related Vulnerabilities

CVE-2024-29026

HIGH
CVSS:8.2(High)

Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. In versions 0.1.2 and prior, a lenient CORS policy allows attackers to make a cross origin requ...

CWE-3522024

CVE-2024-53793

HIGH
CVSS:8.2(High)

Cross-Site Request Forgery (CSRF) vulnerability in eDoc Intelligence LLC eDoc Easy Tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through 1.29.

CWE-3522024

CVE-2024-53829

HIGH
CVSS:8.2(High)

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Cross-site request forgery allows an unauthenticated attacker to hijack the authe...

CWE-3522024

CVE-2025-22347

HIGH
CVSS:8.2(High)

Cross-Site Request Forgery (CSRF) vulnerability in BannerSky.com BSK Forms Blacklist allows Blind SQL Injection.This issue affects BSK Forms Blacklist: from n/a through 3.9.

CWE-3522025

CVE-2025-24897

HIGH
CVSS:8.2(High)

Misskey is an open source, federated social media platform. Starting in version 12.109.0 and prior to version 2025.2.0-alpha.0, due to a lack of CSRF protection and the lack of proper security attribu...

CWE-3522025

CVE-2025-30783

HIGH
CVSS:8.2(High)

Cross-Site Request Forgery (CSRF) vulnerability in jgwhite33 WP Google Review Slider allows SQL Injection. This issue affects WP Google Review Slider: from n/a through 16.0.

CWE-3522025