CVE-2023-49381

HIGH8.8EPSS 0.27%

Cross-Site Request Forgery in JFinalCMS via /admin/div/update

Published: 12/5/2023Modified: 2/16/2024

Description

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References (2)