CVE-2024-25418

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletemenu.php...

CVE-2024-25419

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatemenu.php...

CVE-2024-25419

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatemenu.php...

CVE-2024-25417

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...

flusity CMS Cross-Site Request Forgery Vulnerability

flusity CMS is a user interaction interface solution where code can be easily changed or added. A cross-site request forgery vulnerability exists in flusity CMS version v2.33, which stems from a cross-site request forgery CSRF vulnerability in component /core/tools/updatemenu.php...

CVE-2024-25417

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...

CVE-2024-25419

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatemenu.php...

flusity CMS Cross-Site Request Forgery Vulnerability

flusity CMS is a user interaction interface solution where code can be easily changed or added. A cross-site request forgery vulnerability exists in flusity CMS version v2.33, which stems from a cross-site request forgery CSRF vulnerability in component /core/tools/deletemenu.php...

CVE-2024-25419

CVE-2024-25419 affects flusity-CMS v2.33 via a Cross-Site Request Forgery (CSRF) in the component /core/tools/update_menu.php. The CVSS 3.1 vectors from the sources indicate a high-severity, high-impact issue (C/H, I/H, A/H) with network attack vector, no privileges required, user interaction req...

CVE-2024-25418

Summary: CVE-2024-25418 affects flusity-CMS v2.33, with a CSRF vulnerability in the /core/tools/delete_menu.php component. Root cause is CSRF in that endpoint, leading to potential unauthorized actions without user consent. The CVSS v3.1 metrics indicate a High severity (8.8) with network attack ...

CVE-2024-25418

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletemenu.php...

CVE-2024-25418

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletemenu.php...

flusity CMS Cross-Site Request Forgery Vulnerability

flusity CMS is a user interaction interface solution where code can be easily changed or added. A cross-site request forgery vulnerability exists in flusity CMS version v2.33, which stems from a cross-site request forgery CSRF vulnerability in component /core/tools/addtranslation.php...

CVE-2024-25417

CVE-2024-25417 concerns flusity-CMS v2.33, where a CSRF flaw exists in the /core/tools/add_translation.php component. The vulnerability allows unauthorized actions requiring user interaction, with CVSS v3.1 base score 8.8 (High impact across confidentiality, integrity, and availability; network a...

CVE-2024-24469

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the deletepost .php...

CVE-2024-24468

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the addcustomblock.php...

Cross site request forgery (csrf)

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the deletepost .php...

Cross site request forgery (csrf)

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the addcustomblock.php...

CVE-2024-24468

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the addcustomblock.php...

PT-2024-20410 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity-CMS version 2.33 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the delete post.php endpoint. Recommendations: For flusity-CMS version 2.33, consider disabling access to the dele...