Cross-Site Request Forgery (CSRF) Vulnerability in CMS Made Simple 2.2.5 Admin Profile Page

CVE-2018-1000092 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery (CSRF) vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability appears to have been fixed in 2.2.6.

Learn more about our Web App Pen Testing.