CVE-2026-39170

SemCms version 5.0 is vulnerable to a Cross-Site Request Forgery (CSRF) . The root cause is the improper handling of POST requests directed to the /admin/semcms_user.php endpoint. An attacker could potentially execute unauthorized actions by tricking an authenticated user into making a crafted re...