5 matches found
CVE-2023-49447
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...
8.8CVSS7.5AI score0.00391EPSS
SaveExploits1References1
CVE-2023-49447
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...
8.8CVSS7.3AI score0.00391EPSS
SaveExploits1References2
CVE-2023-49447
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...
8.8CVSS0.00391EPSS
SaveExploits1References1
CVE-2023-49447
Affected software and issue: JFinalCMS v5.0.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/nav/update component, due to insufficient validation of whether a request originates from a trusted user. Impact (as described): The vulnerability can enable an attacker to forge...
8.8CVSS8.8AI score0.00391EPSS
SaveExploits1References1Affected Software1
20