[MEDIUM] Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite

PKSA-p7h1-3152-gpfx CVE-2025-27794 GHSA-hg9j-64wp-m9px

Affected package: flarum/framework

Affected version: <1.8.10

Reported by:
GitHub