Cross site request forgery (csrf)

CSRF exists in BigTree CMS 4.1.18 with the nav-social parameter to the admin/settings/update/ page. The Navigation Social can be changed...

CVE-2017-6916

CVE-2017-6916 affects BigTree CMS 4.1.18. CSRF via the nav-social[#] parameter to admin/settings/update/ can change the Navigation Social setting, per NVD and related records. CVSSv3 base score 4.3 (Medium) with low integrity impact and no confidentiality/availability impact; exploitation details...