FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save.

Published Jan 18, 2024 · Updated Jun 20, 2025 · Assigned by mitre