Description
An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability in the rich text editor that can add an IFRAME element. This might be used in a DoS attack if a referenced remote URL is refreshed at a rapid rate.
Unscored
CVE-2018-11680
EUVD-2018-3700GHSA-6295-q4f9-4m32
An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability in the rich text editor that can add an IFRAME element. This…
Published Jun 2, 2018 · Updated Sep 17, 2024 · Assigned by mitre