CVE-2025-55046

MuraCMS versions through 10.1.10 are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The issue resides in the cTrash.empty function, which fails to perform CSRF token validation . This allows an attacker to trick an authenticated administrator into visiting a malicious webpage th...