CVE-2019-16660

joyplus-cms 1.6.0 has adminajax.php?action=savexml=vodplay CSRF...

CVE-2019-16660

CVE-2019-16660 affects joyplus-cms 1.6.0, where the admin_ajax.php?action=savexml&tab=vodplay request is vulnerable to CSRF. The connected records confirm a CSRF flaw but do not provide explicit exploitation steps or a vendor-provided fix within the supplied documents. The CVE entry lists the vul...