comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments.

Published Jan 14, 2017 · Updated Aug 5, 2024 · Assigned by mitre