Security Advisory
CVE-2018-16345
8.8
HIGH
Vulnerability Description
An issue was discovered in EasyCMS 1.5. There is a CSRF vulnerability that can update the admin password via index.php?s=/admin/rbacuser/update/navTabId/listusers/callbackType/closeCurrent.
Published Date
September 2, 2018
Official Source
NIST NVD Advisory