Skip to content
OpenAdvisories
Unscored CVE-2019-9048 EUVD-2019-18434GHSA-vhqq-mg97-f48m

An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete a theme (aka topic) via a /admin.php?action=them…

Published Feb 23, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete a theme (aka topic) via a /admin.php?action=theme_delete&var1= URI.

References