Skip to content
OpenAdvisories
Unscored CVE-2019-18220 EUVD-2019-8020GHSA-cr2g-6587-3x53

Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming reques…

Published Oct 23, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via spoofed requests. This behavior could be abused by a remote unauthenticated attacker to trick Sitemagic users into performing unwarranted actions.

References