TSA 2008-12/1

Various CSRF (Cross Site Request Forgeery) exploits have been found, mostly within the Admin CP. These exploits could trick a user into performing various administrative tasks with the possibility of data loss within the website.

Affected versions:

< 2.2.0

Related bug report:

Security #55

Solution:

Upgrade to 2.2.0 or later