CSRF in Cmsmadesimple Cms Made Simple

CVE-2010-3884

Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that reset the administrative password. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.008 (53.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)