CVE-2023-49448

HIGH8.8EPSS 0.27%

Cross-Site Request Forgery in JFinalCMS via admin/nav/delete

Published: 12/5/2023Modified: 2/16/2024

Description

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References (2)