flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_menu.php.

Published Feb 11, 2024 · Updated May 15, 2025 · Assigned by mitre