CVE-2019-12253

my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-05-21

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• My Little Forum (Mylittleforum)

References

• https://github.com/ilosuna/mylittleforum/issues/468
• https://github.com/ilosuna/mylittleforum/releases/tag/2.4.20