CVE-2019-16660

joyplus-cms 1.6.0 has adminajax.php?action=savexml&tab=vodplay CSRF...

PT-2019-14746

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue concerns a CSRF vulnerability in the admin ajax.php endpoint, specifically with the action=savexml and tab=vodplay parameters. This allows for potential unauthorized actions. Recommendations For...