Skip to content
OpenAdvisories

Vendor

Bloofox

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.3

    bloofoxCMS 0.5.2.1 Cross-Site Request Forgery via user add

    bloofoxCMS 0.5.2.1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicious pages. Attackers can craft hidden forms targeting the admin user creation endpoi…