CVE-2020-28705

Published March 10th, 2021

View on NVD ↗

CVSS v3

4.3

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

FUEL CMS 1.4.13 contains a cross-site request forgery (CSRF) vulnerability that can delete a page via a post ID to /pages/delete/3.

daylightstudio/FUEL-CMS

A CodeIgniter Content Management System

GitHub

1.02K