| Package | Affected versions | Patched versions |
|---|---|---|
| mipcms | = 5.0.1 |
A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free