CVE-2023-49373

HIGH8.8EPSS 0.27%

Cross-Site Request Forgery in JFinalCMS

Published: 12/5/2023Modified: 2/16/2024

Description

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/slide/delete.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References (3)