PT-2018-12945 · Ignited · Ignited Cms

Name of the Vulnerable Software and Affected Versions: Ignited CMS versions prior to 2017-02-19 Description: The issue allows a CSRF attack, enabling an attacker to add pages. This is possible through the "ign/index.php/admin/pages/add page" API endpoint, specifically by manipulating the request ...