CVE-2024-45987

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-09-26 · updated 2026-06-17
Weakness: CWE-352

Description

Projectworld Online Voting System Version 1.0 is vulnerable to Cross Site Request Forgery (CSRF) via voter.php. This vulnerability allows an attacker to craft a malicious link that, when clicked by an authenticated user, automatically submits a vote for a specified party without the user's consent or knowledge. The attack leverages the user's active session to perform the unauthorized action, compromising the integrity of the voting process.

Affected products

Online Voting System Project Online Voting System: 1.0

References

https://github.com/soursec/CVEs/tree/main/CVE-2024-45987

Get alerted when CVE-2024-45987 or the next vulnerability affects your stack