Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/23 12:00 a.m.•1 views

CVE-2018-25354: Cross-Site Request Forgery (CSRF)

Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated users into visiting malicious pages. Attackers can craft HTML forms targeting the account/index endpoint with hidden fields to chan...

5.3CVSS5.8AI score0.00132EPSS
SaveExploits0References2
Rows per page
Query Builder