CVE-2018-15568: Cross-Site Request Forgery (CSRF)

tp5cms through 2017-05-25 has CSRF via admin.php/category/delete.html...

PT-2018-13093

Name of the Vulnerable Software and Affected Versions tp5cms versions prior to 2017-05-25 Description The issue allows for CSRF via the "admin.php/category/delete.html" endpoint. This can potentially lead to unauthorized actions on the affected system. Recommendations For versions prior to...