Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-39170 EUVD-2026-35971GHSA-4jgf-rqhh-4fgc

SemCms 5.0 is vulnerable to Cross Site Request Forgery (CSRF) via crafted POST request to /admin/semcms_user.php.

Published Jun 9, 2026 · Updated Jun 9, 2026 · Assigned by mitre