medium6.5
CVE-2018-19291
An issue was discovered in DiliCMS 2.4.0.
Impact
An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dilicms | Dilicms | Version 2.4.0 |