Description
SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators via vectors related to "form action requests" using a controller.
Remediation
References
Related Vulnerabilities
MediaWiki CVE-2023-29141 Vulnerability (CVE-2023-29141)
silverstripeCMS Other Vulnerability (CVE-2015-5062)
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-48293)
WordPress Plugin Fancy Product Designer-WooCommerce Cross-Site Scripting (3.4.1)
WordPress Plugin UpiCRM-Free WordPress CRM and Lead Management Information Disclosure (2.1.8.5)