CVE-2018-25363CWE-352

Twitter-Clone 1 Cross-Site Request Forgery via tweetdel.php

Medium · published May 25, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms. Attackers can create hidden forms targeting tweetdel.php with tweet IDs and automatically submit them to delete arbitrary posts from authenticated user sessions.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L
EPSS
0.00199 · 9.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-05-25T14:15Z
EPSS history
Timeline
  • 25 MAY 14:15Z
    Twitter-Clone 1 Cross-Site Request Forgery via tweetdel.php
    cvelistv5