medium6.5
CVE-2020-18889
Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php.
Impact
Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Puppycms | Puppycms | Version 5.1 |