Cross site request forgery (csrf)

An issue was discovered in UNL-CMS 7.59. A CSRF attack can create new content via ?q=node%2Fadd%2Farticle&render=overlay&render=overlay...

PT-2018-13874

Name of the Vulnerable Software and Affected Versions UNL-CMS version 7.59 Description An issue was discovered that allows a CSRF attack to create new content. The attack can be performed via the API endpoint "/node/add/article" with specific parameters, including "render=overlay". Recommendation...