CSRF in X3cms X3 Cms

CVE-2014-8771

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.006 (45.8th percentile) — read the EPSS interpretation.

Affected products

  • X3cms X3_cms — versions 0.5.1, 0.5.1.1
  • N/a — versions n/a

Weakness classification (CWE)

References