2 matches found
CVE-2022-29647: Cross-Site Request Forgery (CSRF)
An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...
8.8CVSS7.8AI score0.00648EPSS
SaveExploits1References2
CVE-2018-17366: Cross-Site Request Forgery (CSRF)
An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...
8.8CVSS7.8AI score0.00572EPSS
SaveExploits0References2
20