Unrated
Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem.
CVE-2020-29458
First seen on SecPulse
References
- report exploit-db.com