CVE-2023-48913

Dreamer CMS v4.1.3 is vulnerable to Cross-Site Request Forgery via the /admin/archives/delete component. Root cause: insufficient verification of request origin for a sensitive operation. Impact includes high confidentiality, integrity, and availability risk (CVSSv3.1: 8.8, UI: REQUIRED, ATT&CK n...