medium6.5
CVE-2021-31677
An issue was discovered in PESCMS-V2.3.3.
Impact
An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pescms | Pescms Team | Version 2.3.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/RO6OTXX/pescms_vulnerability
- https://github.com/lazyphp/PESCMS-TEAM/issues/7%2C
- https://github.com/two-kisses/pescms_vulnerability%2C
- https://github.com/RO6OTXX/pescms_vulnerability
- https://github.com/lazyphp/PESCMS-TEAM/issues/7%2C
- https://github.com/two-kisses/pescms_vulnerability%2C