PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| pyrocms/pyrocms(Packagist) | 0 | N/A | N/A |
CVSS Metrics
