Cross-site request forgery (CSRF) vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI.
CPE | Name | Operator | Version |
---|---|---|---|
plus1 | eq | <= 6.x-2.5 | |
plus1 | eq | 6.120.10 | |
plus1 | eq | 6.120.11 | |
plus1 | eq | 6.120.12 | |
plus1 | eq | 6.120.13 | |
plus1 | eq | 6.x-2.0 beta5 | |
plus1 | eq | 6.x-2.0 beta2 | |
plus1 | eq | 6.120.20 | |
plus1 | eq | 6.x-2.0 beta4 | |
plus1 | eq | 6.x-2.0 beta3 |