CVE-2024-56116

A Cross-Site Request Forgery (CSRF) vulnerability exists in Amiro.CMS versions prior to 7.8.4 . This flaw allows remote attackers to bypass security controls to create an administrator account . The vulnerability has been confirmed by the vendor. While exploitation details are not explicitly prov...

CVE-2024-56115

A vulnerability exists in Amiro.CMS versions prior to 7.8.4 due to the improper neutralization of special elements . This flaw allows remote attackers to conduct a Cross-Site Scripting (XSS) attack. The impact includes potential privilege escalation . To remediate this issue, users should update ...