CVE-2026-39170

SemCms 5.0 is vulnerable to Cross Site Request Forgery CSRF via crafted POST request to /admin/semcmsuser.php...

CVE-2026-39170

SemCms 5.0 is vulnerable to Cross Site Request Forgery CSRF via crafted POST request to /admin/semcmsuser.php...

SEMCMS 跨站请求伪造漏洞

SEMCMS is an open-source content management system CMS for foreign trade websites that supports multiple languages. Version SEMCMS 5.0 has a cross-site request forgeing vulnerability, which stems from improper handling of POST requests directed to /admin/semcmsuser.php. This vulnerability may lea...

CVE-2026-39170

SemCms version 5.0 is vulnerable to a Cross-Site Request Forgery (CSRF) . The root cause is the improper handling of POST requests directed to the /admin/semcms_user.php endpoint. An attacker could potentially execute unauthorized actions by tricking an authenticated user into making a crafted re...