PT-2018-11504

Name of the Vulnerable Software and Affected Versions EasyCMS version 1.3 Description The issue allows for CSRF via the "index.php?s=/admin/user/delAll" URI to delete users. Recommendations For EasyCMS version 1.3, consider implementing proper CSRF protection mechanisms, such as token-based...

CVE-2018-12971: Cross-Site Request Forgery (CSRF)

EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users...