2 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action...
6.8CVSS7.6AI score0.00953EPSS
SaveExploits2References2Affected Software1
CVE-2012-1414
Cross-site request forgery CSRF vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action...
7AI score0.00953EPSS
SaveExploits2References2
20