cleantalk
Vulnerabilities and Security Researches

Activity Log WinterLock, CVE-2025-24982

CVE, Research URL

CVE-2025-24982

Published on
Feb 04, 2025
Research Description
Activity Log WinterLock [winterlock] < 1.2.5 CVE-2025-24982 [en] Cross-site request forgery vulnerability exists in Activity Log WinterLock versions prior to 1.2.5. If a user views a malicious page while logged in, the log data may be deleted.
Affected versions
max 1.2.5.
Status
vulnerable