CVE-2025-28103
Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.
Original description
The description as published by the source.
Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.
References
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web gist.github.com