medium5.7
CVE-2019-8902
An issue was discovered in idreamsoft iCMS through 7.0.14.
Impact
An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idreamsoft | Icms | through 7.0.14 |