Cross site request forgery (csrf)

2018-08-0519:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the theme, title, and description) via index.php.

CPENameOperatorVersion
weaselcmseq0.3.5

CPE	Name	Operator	Version
	weaselcms	eq	0.3.5

References

github.com/alterebro/WeaselCMS/issues/6