3 matches found
CVE-2024-36670
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=del...
8.8CVSS7.1AI score0.00289EPSS
SaveExploits1References1
CVE-2024-36670
The software idccms v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) issue within the admin/vpsClass_deal.php?mudi=del component. This vulnerability allows for unauthorized requests to be made on behalf of the user. As a temporary workaround, users are advised to disable access to the a...
8.8CVSS7.4AI score0.00289EPSS
SaveExploits1References1Affected Software1
20