A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows malicious users to bypass authentication via a crafted web request.
murasoftware mura cms