high8.8
CVE-2018-19560
BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.
Impact
BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bagesoft | Bagecms | Version 3.1.3 |