07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId.

Published Jan 16, 2025 · Updated Feb 3, 2025 · Assigned by mitre