1 matches found
CVE-2023-49395
JFinalCMS v5.0.0 has a Cross-Site Request Forgery (CSRF) vulnerability in /admin/category/update. Root cause: CSRF in that endpoint. Impact: high (confidentiality, integrity, availability) per CVSS 3.1 (8.8). Exploitation details are not provided in the connected docs. Remediation: in the PT-2023...
8.8CVSS8.8AI score0.00391EPSS
SaveExploits1References1Affected Software1
20