system
Describe <CVE-2012-1414>.
user
What is <CVE-2012-1414>?
assistant
Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action..