Description
The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Google Review Slider Cross-Site Scripting (11.5)
WordPress Credentials Management Errors Vulnerability (CVE-2009-2762)
PmWiki Other Vulnerability (CVE-2006-4453)
WordPress Plugin Save Contact Form 7 SQL Injection (1.7)
Joomla Improper Authentication Vulnerability (CVE-2017-16634)