CVE-2017-6914
CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted.
Published: 2017-03-15 · CVSS: Unscored
CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7