Description
Cross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter.
Remediation
References
Related Vulnerabilities
WordPress Plugin Fathom Analytics Cross-Site Scripting (3.0.4)
Joomla Improper Authentication Vulnerability (CVE-2014-6632)
WordPress Plugin YITH WooCommerce Recover Abandoned Cart Security Bypass (1.3.2)
Apache Tomcat WAR file directory traversal vulnerability
WordPress Plugin Calendar Event Multi View Multiple Vulnerabilities (1.1.4)