CVE-2018-19560

BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account...

PT-2018-15005

Name of the Vulnerable Software and Affected Versions BageCMS version 3.1.3 Description The issue allows for CSRF, enabling modification of a user account through the upload/index.php?r=admini/admin/ownerUpdate API endpoint. Recommendations For BageCMS version 3.1.3, update to a newer version tha...