Description
A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages.
Remediation
References
Related Vulnerabilities
WordPress Plugin The Sorter SQL Injection (1.0)
OpenSSL Use of Insufficiently Random Values Vulnerability (CVE-2019-1549)
WordPress Plugin Catchers Helpdesk and Ticket system for Support Cross-Site Scripting (1.0.3)
Moodle Other Vulnerability (CVE-2004-2232)
WordPress Plugin Awesome Filterable Portfolio Multiple SQL Injection Vulnerabilities (1.8.6)