description: A Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF) through 1.0.9 due to inadequate confirmation for sensitive transactions in the administrator functions.
problem types: CSRF
affected:
{
product: Advanced Electron Forums (AEF)
vendor: Electron Inc.
versions:
status: affected, version: through 1.0.9
}