← Database

CVE-2024-49685

MEDIUM CVSS: 5.4 Published: 2024-10-31 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Custom Twitter Feeds (Tweets Widget) custom-twitter-feeds allows Cross Site Request Forgery.This issue affects Custom Twitter Feeds (Tweets Widget): from n/a through <= 2.2.3.

Affected Platforms

Smashballoon Custom Twitter Feeds

Weakness Type

CWE-352

References