CVE-2019-16719

WTCMS 1.0 allows index.php?g=admin=index=index CSRF with resultant XSS...

CVE-2019-16719

WTCMS 1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability that can result in a stored/ reflected XSS when accessing index.php?g=admin&m=index&a=index. The CVE description and multiple connected sources confirm the issue as a CSRF leading to XSS; however, the provided documents do not i...