CVE-2018-14958

Published August 5th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.8

MEDIUM

Affected

1

PROJECT

Description

An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the theme, title, and description) via index.php.

alterebro/WeaselCMS

Lightweight flat file CMS written in PHP

GitHub

12