PT-2024-20409 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity-CMS version 2.33 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the "add customblock.php" endpoint. Recommendations: For flusity-CMS version 2.33, consider disabling access to th...