CVE-2024-26349

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletetranslation.php...

CVE-2024-26349

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletetranslation.php...

CVE-2024-26349

The flusity-CMS software, specifically version v2.33 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw exists in the /core/tools/delete_translation.php component, which can allow an attacker to perform unauthorized actions on behalf of a user without their knowledge or conse...