← All advisories

Medium severity4.3NVD Advisory· Published Oct 8, 2020· Updated Jun 17, 2026

CVE-2020-25262

CVE-2020-25262

Description

PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
pyrocms/pyrocmsPackagist	<= 3.7	—

Affected products

3

PyroCMS/PyroCMSdescription
ghsa-coords
pkg:composer/pyrocms/pyrocms
Range: <= 3.7
PyroCMS/PyroCMS
cpe:2.3:a:pyrocms:pyrocms:3.7:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

gist.github.com/farid007/2af454d909fa5a60a07e4e547e99964envdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-56xx-pv88-2662ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-25262ghsaADVISORY
pyrocms.comnvdProduct

News mentions

0

No linked articles in our index yet.