Cross site request forgery (csrf)

2019-05-2117:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.0%

my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.

CPENameOperatorVersion
my_little_forumlt2.4.20

CPE	Name	Operator	Version
	my_little_forum	lt	2.4.20

References

github.com/ilosuna/mylittleforum/issues/468

github.com/ilosuna/mylittleforum/releases/tag/2.4.20