How severe is CVE-2024-34817?

Medium severity. CVSS v3 base score is 4.3 out of 10.

CSRF in Crm Perks Integration For Pipedrive And Contact Form 7, Wpforms, Elementor, Ninja Forms

CVE-2024-34817

Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms: fr…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.002 (15.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.

Affected products

Crm Perks Integration For Pipedrive And Contact Form 7, Wpforms, Elementor, Ninja Forms — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

audit@patchstack.com (vdb-entry)

Frequently asked questions

What is CVE-2024-34817?: CVE-2024-34817 is a medium-severity vulnerability in Crm Perks Integration For Pipedrive And Contact Form 7, Wpforms, Elementor, Ninja Forms, classified under Cross-Site Request Forgery (CSRF). CVSS score: 4.3/10. Published 2024-05-14.
How severe is CVE-2024-34817?: Medium severity. CVSS v3 base score is 4.3 out of 10.