1 matches found
CVE-2018-19291: Cross-Site Request Forgery (CSRF)
An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI...
6.5CVSS6.6AI score0.00651EPSS
SaveExploits1References2
20