Total vulnerabilities in the database
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar.
CVSS v3:
CVSS v2:
CWEs: