PT-2024-20410 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity-CMS version 2.33 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the delete post.php endpoint. Recommendations: For flusity-CMS version 2.33, consider disabling access to the dele...