CVE-2023-48020

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/task/changeStatus...

CVE-2023-48020

Summary: CVE-2023-48020 affects Dreamer CMS 4.1.3 with a CSRF vulnerability exploitable via /admin/task/changeStatus. The CVSS 3.1 base score is 8.8 (High) with PR:None, UI:Required, and impacts to confidentiality, integrity, and availability (all High). Connected sources confirm the same vector ...