CVE-2024-25418

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletemenu.php...

CVE-2024-25418

Summary: CVE-2024-25418 affects flusity-CMS v2.33, with a CSRF vulnerability in the /core/tools/delete_menu.php component. Root cause is CSRF in that endpoint, leading to potential unauthorized actions without user consent. The CVSS v3.1 metrics indicate a High severity (8.8) with network attack ...