CVE-2023-40008

Name of the Vulnerable Software and Affected Versions Gangesh Matta Simple Org Chart plugin versions prior to 2.3.4

Description The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.

Recommendations For versions prior to 2.3.4, update to a version that contains a fix for this issue. As a temporary workaround, consider implementing additional validation for requests to prevent unauthorized actions. Restrict access to sensitive areas of the application to minimize the risk of exploitation.