CVE-2018-11092

The CVE describes a CSRF flaw in the MyBB Admin Notes plugin (version 1.1) where an attacker can remotely delete all admin notes via admin/index.php?empty=table (Clear Table). Affected component: Admin Notes plugin for MyBB. Impact: deletion of all admin notes. Root cause: CSRF vulnerability. Exp...