Description
phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships.
Remediation
References
Related Vulnerabilities
WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler Unspecified Vulnerability (5.1.2)
WordPress Plugin CONTUS VBLOG-Video Blogging 'save.php' Arbitrary File Upload (1.0)
PHP Other Vulnerability (CVE-2014-4698)
WordPress Plugin Bloom eMail Opt-In Security Bypass (1.1)
WordPress Plugin All-in-One Event Calendar Cross-Site Scripting (2.4.0)