CVE-2020-25263

Published October 8th, 2020

View on NVD ↗

CVSS v3

7.1

HIGH

CVSS v2

5.8

MEDIUM

Affected

PROJECT

Description

PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted.

pyrocms/pyrocms

Pyro is an experienced and powerful Laravel PHP CMS.

GitHub

3.18K