Cross site request forgery (csrf)

School Event Management System 1.0 allows CSRF via user/controller.php?action=edit...

PT-2018-14658

Name of the Vulnerable Software and Affected Versions School Event Management System version 1.0 Description The issue allows for CSRF via the "user/controller.php?action=edit" endpoint, potentially enabling unauthorized modifications. Recommendations For School Event Management System version 1....

CVE-2018-18794: Cross-Site Request Forgery (CSRF)

School Event Management System 1.0 allows CSRF via user/controller.php?action=edit...