[20200102] - Core - CSRF com_templates LESS compiler

A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...

Less Compiler Arbitrary Code Execution Vulnerability

LESS is a dynamic cascading style sheet language designed by Alexis Sellier. An arbitrary code execution vulnerability exists in Less Compiler. An attacker can exploit the vulnerability to execute arbitrary code in the context of an affected application...