Published: 08/10/2020 Updated: 21/11/2024

PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pyrocms pyrocms 3.7

PyroCMS Exploit Framework

ArsonAssistant PyroCMS Exploit Framework WIP Thank you for your patience CVE-2023-29689: (Authenticated) SSTI to RCE in PyroCMS v39 CVE-2020-25262: CSRF leading to page deletion CVE-2020-25263: CSRF for plugin erasure Low-Priv Authenticated) Stored XSS in PyroCMS 211

CWE-352 https://nvd.nist.gov https://github.com/scumdestroy/ArsonAssistant https://www.first.org/epss https://gist.github.com/farid007/df51b0666643ec01d5571cbcc1e966e7 https://github.com/pyrocms/pyrocms https://pyrocms.com/https://gist.github.com/farid007/df51b0666643ec01d5571cbcc1e966e7 https://github.com/pyrocms/pyrocms https://pyrocms.com/

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-25263

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect