Improper Access Control

github.com/usememos/memos is vulnerable to improper access control. The vulnerability allows authenticated remote attackers to edit and delete all other user shortcuts via the ID parameter...

CSRF in extension "femanager" (femanager)

The extension fails to implement a CSRF protection for edit and delete actions...