CVE-2017-15731: Cross-Site Request Forgery (CSRF)

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/stat.adminlog.php...

CVE-2017-15731

CVE-2017-15731 affects phpMyFAQ prior to 2.9.9, with a CSRF vulnerability in admin/stat.adminlog.php. The issue arises from missing CSRF protections, potentially enabling unauthorized actions (e.g., deleting the admin log) via a crafted request in an authenticated session. Remediation: upgrade to...