Threats tagged 'ghsa-r4hj-gx22-xfqh'

Windu CMS version 4.1 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in its user editing functionality. The implemented CSRF protection can be bypassed by using the CSRF token of another user. Registration is open, allowing anyone to create an account, which may facilitate exploitation. The vendor has not provided details on affected versions or remediation. No confirmed exploits are known in the wild.