CVE-2026-117534

REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/history plugin that allows attackers to delete history or roll back content via unvalidated GET requests. Attackers can lure logged-in backend users to a page triggering func=clearall or...

EUVD-2026-110799

REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/history plugin that allows attackers to delete history or roll back content via unvalidated GET requests. Attackers can lure logged-in backend users to a page triggering func=clearall or...

CVE-2026-117534

REDAXO versions prior to 5.21.3 are vulnerable to a cross-site request forgery (CSRF) vulnerability within the structure/history plugin . The root cause is the use of unvalidated GET requests to perform sensitive actions. An attacker can lure authenticated backend users to a malicious page that t...

CVE-2026-117534 REDAXO before 5.21.3 CSRF in Article History Plugin

REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/history plugin that allows attackers to delete history or roll back content via unvalidated GET requests. Attackers can lure logged-in backend users to a page triggering func=clearall or...

CVE-2026-117534 REDAXO before 5.21.3 CSRF in Article History Plugin

REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/history plugin that allows attackers to delete history or roll back content via unvalidated GET requests. Attackers can lure logged-in backend users to a page triggering func=clearall or...

PT-2026-126369

REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/history plugin that allows attackers to delete history or roll back content via unvalidated GET requests. Attackers can lure logged-in backend users to a page triggering func=clearall or rex history...

REDAXO CMS core cross-site request forgery vulnerability

REDAXO CMS versions prior to core 5.21.3 contain a cross-site request forgery vulnerability. This flaw stems from the structure/history plugin’s failure to validate GET requests, making it susceptible to such attacks. It could allow attackers to trick logged-in users into triggering func=clearall...

CVE-2024-42603

Pligg CMS v2.0.2 (also referenced as Kliqqi CMS) contains a CSRF vulnerability exploitable via /admin/admin_backup.php?dobackup=clearall. The issue arises because the request is not adequately verified as originating from a trusted user, allowing an attacker to forge or induce sensitive operation...

CVE-2024-42603

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=clearall...

PT-2024-30055 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This vulnerability can be exploited via the "/admin/admin backup.php" endpoint, specifically when the dobackup parameter is set to...

CVE-2024-42603

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=clearall...

CVE-2024-42603: Cross-Site Request Forgery (CSRF)

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=clearall...