An attacker can update, create, and remove the site's mobile redirects via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
id: CVE-2023-23897
info:
name: Ozette Plugins - Cross-Site Request Forgery
author: popcorn94
...