Cross site request forgery (csrf)

2018-09-0218:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.6%

JSON

An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website’s basic configuration via upload/admin.php/setting/save.

CPENameOperatorVersion
cscmseq4.1.8

CPE	Name	Operator	Version
	cscms	eq	4.1.8

References

github.com/chshcms/cscms/issues/2