high8.8
CVE-2018-16732
\upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save.
Impact
\upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chshcms | Cscms | Version 4.1 |