TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php.

Published Sep 20, 2022 · Updated May 29, 2025 · Assigned by mitre