CVE-2024-9847 Cross-Site Request Forgery (CSRF) in flatpressblog/flatpress

High 8.0 Published 20 Mar 2025 Updated 20 Mar 2025

An attacker can trick authenticated users into enabling or disabling plugins via CSRF, compromising site integrity.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-9847?

CVE-2024-9847 is a high-severity vulnerability in flatpressblog/flatpress, published on 20 Mar 2025. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow an attacker to enable or disable plugins on behalf of a victim user. The attacker can craft a malicious link or script that, when clicked by an authenticated user, will send a request to the FlatPress CMS server to perform the desired action on behalf of the victim user. Since the request is authenticated, the server will process it as if it were initiated by the legitimate user, effectively allowing the attacker to perform unauthorized actions. This vulnerability is fixed in version 1.4.dev.

Weakness: CWE-352

Which versions are affected by CVE-2024-9847?

It affects 1 product.

Products include Flatpress Flatpress.

How do I fix CVE-2024-9847?

No fix has been published for CVE-2024-9847 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-9847 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-9847 exists.

Sources

Also known as GHSA-x2w2-frfv-4f2j.