PT-2018-13553

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4 Description A cross-site request forgery issue exists, allowing remote attackers to modify the administrator's password via the "my profile/edit?inline=" endpoint. Recommendations For FUEL CMS version 1.4, consider disabli...