1 matches found
ExpressionEngine: Arbitrary comment content change with GET CSRF.
The vulnerability in Expression Engine 6.0.1 allowed unauthorized modification of comments through improperly protected requests...