{"id":"CVE-2018-14519","aliases":["GHSA-c7x2-7h8r-jq4m"],"url":"https://o3.security/vulnerability/CVE-2018-14519","summary":"Kirby CMS 2.5.12 Cross-site Request Forgery","details":"An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can craft a malicious CSRF page and force the user to delete a page.","published":"2022-08-24T20:15:08.453Z","modified":"2026-07-08T17:15:35.223768Z","cvss":{"score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},"epss":{"score":0.00485,"percentile":0.39859,"asOf":"2026-08-23"},"cisaKev":null,"exploitsKnown":2,"affectedPackages":[{"ecosystem":"Packagist","name":"getkirby/cms","fixedVersion":null}],"fix":null,"references":[{"type":"EVIDENCE","url":"http://zaranshaikh.blogspot.com"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/45090"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T17:15:35.223768Z"}}