PT-2018-13875

Name of the Vulnerable Software and Affected Versions UNL-CMS version 7.59 Description An issue was discovered that allows a CSRF attack to update website settings via the "/admin/config/system/site-information" API endpoint. Recommendations For UNL-CMS version 7.59, update the software to a...