critical9.8
CVE-2017-5959
CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges.
Impact
CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Metalgenix | Genixcms | through 1.0.1 |