Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-44937 EUVD-2022-47866GHSA-74cg-7f6j-22xm

Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function under the Administrator List module.

Published Nov 28, 2022 · Updated Apr 25, 2025 · Assigned by mitre