PT-2018-9265

Name of the Vulnerable Software and Affected Versions: Pym.js versions 0.4.2 through 1.3.1 Description: The issue concerns a Cross Site Request Forgery CSRF vulnerability in the onNavigateToMessage function of Pym.js. This can result in arbitrary JavaScript code execution. The attack is exploitab...