Unscored CVE-2023-48063 EUVD-2023-52148GHSA-7m4h-4frj-xvm5

An issue was discovered in dreamer_cms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/category/delete.

Published Nov 13, 2023 · Updated Sep 3, 2024 · Assigned by mitre

Description

An issue was discovered in dreamer_cms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/category/delete.

References

https://github.com/CP1379767017/cms/blob/dreamcms_vul/There%20is%20a%20CSRF%20vulnerability%20at%20th%20menu%20management%20location.md