Download
| Alert*
Drupal 5.x before 5.3 does not apply its Drupal Forms API protection against the user deletion form, which allows remote attackers to delete users via a cross-site request forgery (CSRF) attack. CVSS Score and Metrics +CVSS Score and Metrics -
|