CVE-2016-1172

Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators.

Date published : 2016-04-06

https://hiniarata.jp/news/archives/55

http://jvn.jp/en/jp/JVN13288761/index.html