CVE-2022-40489
ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.
Published: 2022-12-01 · CVSS: 8.8 · CVSS 3.1
ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7