Description
phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships.
Remediation
References
Related Vulnerabilities
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.36)
Joomla Incorrect Authorization Vulnerability (CVE-2018-17857)
Joomla Improper Authentication Vulnerability (CVE-2017-16634)
WordPress Plugin Compfight Cross-Site Scripting (1.4)
ReviveAdserver URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-5433)