high8.8
CVE-2018-16416
Cross-site request forgery (CSRF) vulnerability in my_profile/edit?inline= in FUEL CMS 1.4 allows remote attackers to change the administrator's password.
Impact
Cross-site request forgery (CSRF) vulnerability in my_profile/edit?inline= in FUEL CMS 1.4 allows remote attackers to change the administrator's password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thedaylightstudio | Fuel Cms | Version 1.4 |