FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_category_edit.

Published Mar 4, 2024 · Updated Aug 2, 2024 · Assigned by mitre