A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link.
- https://github.com/bg5sbk/MiniCMS/issues/45
No PoCs found on GitHub currently.