CVE-2024-46485

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/doAdminAction.php?act=addCate...

CVE-2024-46485

The dingfanzu CMS version 1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) via the /admin/doAdminAction.php?act=addCate API endpoint. This flaw allows an attacker to perform unauthorized actions on the system. As a temporary workaround, it is recommended to restrict access to this specifi...