Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.

Published Apr 21, 2025 · Updated May 12, 2025 · Assigned by mitre