CVE-2026-92383

CVE-2026-92383 is a cross-site request forgery (CSRF) vulnerability in PbootCMS versions up to 3.2.24 , affecting the UserController::del and UserController::mod functions within the User Management component (apps/admin/controller/system/UserController.php). A remote attacker with no privileges ...

PT-2026-93818

Name of the Vulnerable Software and Affected Versions PbootCMS versions prior to 3.2.25 Description A cross-site request forgery issue exists in the User Management component. A remote attacker can manipulate the UserController::del and UserController::mod functions within the...