CVE-2023-48060

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/add

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2023-11-13

Last modified

2024-09-03

Weaknesses

CWE-352

Affected products

• Dreamer Cms (Dreamer Cms Project)
• Dreamer Cms (Iteachyou)

References

• https://github.com/CP1379767017/cms/blob/main/CSRF%20exists%20at%20the%20location%20where%20task%20management%20adds%20…