cve/2024/CVE-2024-29009.md

### [CVE-2024-29009](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29009)
![](https://img.shields.io/static/v1?label=Product&message=easy-popup-show&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20all%20versions%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Cross-site%20request%20forgery%20(CSRF)&color=brighgreen)

### Description

** UNSUPPPORTED WHEN ASSIGNED ** Cross-site request forgery (CSRF) vulnerability in easy-popup-show all versions allows a remote unauthenticated attacker to hijack the authentication of the administrator and to perform unintended operations if the administrator views a malicious page while logged in.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds