Critical · 9.6 CVE-2025-25379 EUVD-2025-5918GHSA-vqx8-mvcx-mx39

Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the…

Published Feb 28, 2025 · Updated Mar 4, 2025 · Assigned by mitre

Description

Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.

References

https://github.com/R2og/Sun-jialiang/tree/main/9/readme.md