Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make permission modifications.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CMS Made Simple Change Group Permissions模块跨站请求伪造漏洞
Vulnerability Description
CMS Made Simple(简称CMSMS)作为一款优秀的轻量级开源内容管理系统(CMS)。 CMS Made Simple 1.7.1及之前版本中的Change Group Permissions模块中存在跨站请求伪造漏洞。远程攻击者可以劫持任意用户请求修改权限的认证。
CVSS Information
N/A
Vulnerability Type
N/A