p PatchFirst

CVE-2022-25576

CVE-2022-25576

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php. This vulnerability allows attackers to arbitrarily delete posts.

CVSS 4.5 · Medium · EPSS 0.4%

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • anchorcms/anchor-cms Packagist

    Versions
    • 0.11
    • 0.12
    • 0.12.1
    • 0.12.3
    • 0.12.3a
    • 0.12.6
    • 0.12.7
    • 0.9
    • 0.9.1
    • 0.9.2
    • 0.9.3
    • 0.9.3-a
    • 0.9.3-b
    • 0.9.3.1-a
    Affected ranges
    • ECOSYSTEM: ≤ 0.12.7

    No fix published

Original sources

Check your server →