CVE-2024-29499

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery CSRF via /anchor/admin/users/delete/2...

CVE-2024-29499

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery CSRF via /anchor/admin/users/delete/2...

CVE-2024-29499

Anchor CMS version v0.12.7 is vulnerable to a Cross-Site Request Forgery (CSRF) via the /anchor/admin/users/delete/2 endpoint. The root cause is identified as improper request validation , which allows an attacker to forge requests and perform unauthorized actions on behalf of authenticated users...