2 matches found
Cross site request forgery (csrf)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/admin/addgroupsave...
CVE-2024-22593
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via the endpoint /system/admin/add_group_save. The issue allows forging requests to perform sensitive operations by an authenticated user, with CVSS v3.1 base metrics indicating high impact (C, I, A = High) and user interactio...