Cross site request forgery (csrf)

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatecontactformsettings.php...

PT-2024-21365

Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description The issue is related to a Cross-Site Request Forgery CSRF in the component /core/tools/update contact form settings.php. This allows for unauthorized actions to be performed on behalf of a user...