MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts.

Published Feb 21, 2018 · Updated Sep 16, 2024 · Assigned by mitre