idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=add.

Published May 22, 2024 · Updated Mar 25, 2025 · Assigned by mitre