Cross site request forgery (csrf)

Poor cryptographic salt initialization in admin/inc/templatefunctions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an arbitrary user or conduct CSRF attacks via calculation of a session cookie or CSRF nonce...

PT-2017-18108

Name of the Vulnerable Software and Affected Versions GetSimple CMS version 3.3.13 Description The issue concerns poor cryptographic salt initialization, which can be exploited by a network attacker to escalate privileges to an arbitrary user or conduct CSRF attacks. This is achieved through the...