Cross site request forgery (csrf)

2019-02-2319:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete articles via a /admin.php?action=deletepage&var1= URI.

CPENameOperatorVersion
pluckeq4.7.9 dev1

CPE	Name	Operator	Version
	pluck	eq	4.7.9 dev1

References

github.com/pluck-cms/pluck/issues/69