PT-2025-5955 · Songkick · Songkick Concerts/Festivals

Name of the Vulnerable Software and Affected Versions: Songkick Concerts and Festivals versions 0.9.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricki...