fanyibo2009/cscms

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-11527 ↗	May 29, 2018Tuesday, 29 May 2018, 07:29	—	6.8 MEDIUM
An issue was discovered in CScms v4.1. A Cross-site request forgery (CSRF) vulnerability in plugins/sys/admin/Sys.php allows remote attackers to change the administrator's username and password via /admin.php/sys/editpass_save.