PT-2014-6335

Name of the Vulnerable Software and Affected Versions Improved user search in backend plugin versions prior to 1.2.5 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that insert XSS sequences via the iusib me...