Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem.

Published Dec 2, 2020 · Updated Aug 4, 2024 · Assigned by mitre