Threats tagged 'ghsa-cvwg-2j53-5h76'

A cross-site request forgery (CSRF) vulnerability exists in nliautaud pico-content-editor up to commit 02d5ad6c820c5050c542ab9505819b5e0a0ba1af. The vulnerability allows remote attackers to perform unauthorized actions via crafted requests. The product uses a rolling release model, and specific affected or fixed versions are not disclosed. The maintainer no longer supports this product, and no vendor response or patch is available. Public exploit code has been released.