Description
CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.
Remediation
References
Related Vulnerabilities
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-19520)
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.33)
Roundcube Unspesificed Vulnerability (CVE-2019-15237)
WordPress Plugin Total Security Multiple Unspecified Vulnerabilities (3.4.1)
WordPress Plugin LearnPress-WordPress LMS Arbitrary File Write (3.2.2)