Ec Cube4 · Easy Blog For Ec-Cube4 · CVE-2022-27174
**Name of the Vulnerable Software and Affected Versions**
Easy Blog for EC-CUBE4 versions 1.0.1 and earlier
**Description**
A cross-site request forgery (CSRF) issue allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page.
**Recommendations**
For Easy Blog for EC-CUBE4 versions 1.0.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.