CVE-2019-9052: Cross-Site Request Forgery (CSRF)

An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete pictures via a /admin.php?action=deleteimage&var1= URI...

PT-2019-19337

Name of the Vulnerable Software and Affected Versions Pluck version 4.7.9-dev1 Description An issue was discovered that allows for a CSRF vulnerability, enabling the deletion of pictures via the "/admin.php?action=deleteimage&var1=" URI. Recommendations For Pluck version 4.7.9-dev1, consider...