CVE-2023-47350

Published November 22nd, 2023

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Cross-Site Request Forgery (CSRF) vulnerability in SwiftyEdit Content Management System prior to v1.2.0, allows remote attackers to escalate privileges via the user password update functionality.

SwiftyEdit/SwiftyEdit

Web Content Management System for Websites, Blogs and Shops

GitHub