Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages...

CVE-2022-27432

CVE-2022-27432 (Pluck CMS 4.7.15) —A Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to change passwords for arbitrary users, enabling account takeover. Affected: Pluck CMS, version 4.7.15. Root cause: CSRF vulnerability as described in the vulnerability entry. Impact: account ...