Security Advisory
CVE-2020-36389
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.
CVE vulnerability detail — eXtreme Datacenter Security Operations
In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.