CVE-2025-55040

MuraCMS versions through 10.1.10 are vulnerable to a Cross-Site Request Forgery (CSRF) flaw in the cForm.importform function. The vulnerability exists because the function fails to perform CSRF token validation , allowing an attacker to forge file upload requests. If an authenticated administrato...