PyroCMS Cross-Site Request Forgery Vulnerability

PyroCMS is an easy-to-use, powerful and modular CMS and development platform built using Laravel 5. A cross-site request forgery vulnerability exists in PyroCMS 3.7. An attacker can exploit this vulnerability to remove arbitrary plugins via the admin/addons/uninstall/anomaly.module.blocks URI...

CVE-2020-25263: Cross-Site Request Forgery (CSRF)

PyroCMS 3.7 is vulnerable to cross-site request forgery CSRF via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted...