Unscored CVE-2021-37366 EUVD-2021-23935GHSA-cqf2-qf4h-jgpj

CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel. By combining CSRF with XSS, an …

Published Aug 10, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel. By combining CSRF with XSS, an attacker can trick the administrator into clicking a link that cancels the filtering for all standard users.

References

https://gitlab.com/marsat/CTparental/
https://gist.github.com/securylight/092ba96a660e07ad76f2a380c2eaa75a