Loading...
Loading...
Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action.
October 7, 2012
April 29, 2026
See which npm, PyPI, Go, and Maven packages are affected by CVE-2012-1414
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.