CVE-2018-10312

index.php?m=member&v=pwreset in WUZHI CMS 4.1.0 allows CSRF to change the password of a common member...

CVE-2018-10312

WUZHI CMS 4.1.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the password-reset endpoint index.php?m=member&v=pw_reset. The issue allows an attacker to cause a logged-in user to change the user’s password by submitting a forged request, potentially compromising account acce...