Description
PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | pyrocms/pyrocms | <= 3.7 | — | GHSA-56xx-pv88-2662 |
Medium · 4.3
CVE-2020-25262
EUVD-2022-2515GHSA-56xx-pv88-2662
PyroCMS Vulnerable to CSRF
Published Oct 8, 2020 · Updated Aug 4, 2024 · Assigned by mitre