PT-2017-14363

Name of the Vulnerable Software and Affected Versions OctoberCMS version 1.0.426 Description The issue is related to Cross-Site Request Forgery, which occurs due to improper validation of CSRF tokens for postback handling. This allows an attacker to take over the victim's account by bypassing a...