Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the erasespamedcomments process. An attacker can permanently delete arbitrary wiki pages, including critical or administrative pages, by sending crafted POST requests containing a suppr array with targeted page...