medium5.5
CVE-2024-35557
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close.
Impact
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idccms | Idccms | Version 1.35 |