themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database.

Published May 5, 2021 · Updated Aug 4, 2024 · Assigned by mitre