Page Module (< 2.0.4)

The Thelia Page Module before 2.0.4 is vulnerable to CSRF, allowing an attacker to trick a logged-in administrator into triggering unauthorized deletions of tags, documents, and images.