PT-2018-10303

Name of the Vulnerable Software and Affected Versions MyBB Admin Notes plugin version 1.1 Description An issue allows an attacker to remotely delete all admin notes. This can be achieved via the "admin/index.php?empty=table" action, which is vulnerable to CSRF. Recommendations For MyBB Admin Note...