Cimatti · Contact Forms By Cimatti · CVE-2025-49069
**Name of the Vulnerable Software and Affected Versions**
Contact Forms by Cimatti versions 1.9.8 and earlier
**Description**
The issue is a Cross-Site Request Forgery (CSRF) vulnerability, which allows an attacker to perform unauthorized actions on a user's behalf. This can be achieved by tricking the user into performing an unintended action, such as submitting a form.
**Recommendations**
For versions 1.9.8 and earlier, update to a version that includes a fix for this issue, as no specific mitigation measures are provided for these versions.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.