CVE-2022-44937

Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function under the Administrator List module.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-11-28

Last modified

2025-04-25

Weaknesses

CWE-352

Affected products

• Bosscms (Bosscms)

References

• https://github.com/5497lvren/Zhenhao/issues/1