CVE-2018-14958

2018-08-0519:29:00

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the theme, title, and description) via index.php.

CPENameOperatorVersion
weaselcmseq0.2
weaselcmseq0.3.5
weaselcmseq0.1
weaselcmseq0.3.0
weaselcmseq0.3.3

Name	Operator	Version
weaselcms	eq	0.2
weaselcms	eq	0.3.5
weaselcms	eq	0.1
weaselcms	eq	0.3.0
weaselcms	eq	0.3.3

References

github.com/alterebro/WeaselCMS/issues/6