CVE-2012-1414

The CVE-2012-1414 entry relates to a Cross-site request forgery (CSRF) vulnerability in Plume CMS, specifically in the file manager/news.php for version 1.2.4 and earlier. The issue allows remote attackers to hijack the authentication of administrators when performing publish actions that create ...