WTCMS 1.0 contains a cross-site request forgery (CSRF) vulnerability in the index.php?g=admin&m=nav&a=add_post component that allows malicious users to arbitrarily add articles in the administrator background.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
wtcms project wtcms 1.0 |