Jorani v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /application/controllers/Users.php.

Published Jun 27, 2022 · Updated Mar 30, 2026 · Assigned by mitre