CVE-2020-36389
CVE-2020-36389
In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →