CVE-2018-25363

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

4.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N                                    

Vulnerability Description

Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms. Attackers can create hidden forms targeting tweetdel.php with tweet IDs and automatically submit them to delete arbitrary posts from authenticated user sessions.

Vulnerability Details

Published Date

May 25, 2026

Last Modified

May 26, 2026

CWE ID

CWE-352

Source

NVD

Vendor

Fyffe

Product

PHP-Twitter-Clone

External References

https://github.com/Fyffe/PHP-Twitter-Clone/
https://www.exploit-db.com/exploits/45232
https://www.vulncheck.com/advisories/twitter-clone-1-cross-site-request-forgery-via-tweetdel-php

CVE-2018-25363

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment