Datenstrom Yellow vulnerabilities

• datenstrom yellow The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles. CVE-2018-10758 6.5 MediumMay 5, 2018
• datenstrom yellow ** DISPUTED ** A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page"... CVE-2018-10726 Disputed 5.4 MediumMay 4, 2018