Description
An issue was discovered in the Admin Notes plugin 1.1 for MyBB. CSRF allows an attacker to remotely delete all admin notes via an admin/index.php?empty=table (aka Clear Table) action.
Unscored
CVE-2018-11092
EUVD-2018-3135GHSA-phjp-gxh4-rcjp
An issue was discovered in the Admin Notes plugin 1.1 for MyBB. CSRF allows an attacker to remotely delete all admin notes via an admin/ind…
Published May 21, 2018 · Updated Aug 5, 2024 · Assigned by mitre