An issue was discovered in WeaselCMS v0.3.5. CSRF can update the website settings (such as the theme, title, and description) via index.php.

Published Aug 5, 2018 · Updated Sep 17, 2024 · Assigned by mitre