CVE-2018-10030: CSRF
Published Apr 11, 2018
·Updated
CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/siteprefs.php.
Affected Software
1 affected component
CMSmadesimple CMS Made Simple<=2.2.7
Event History
Apr 11, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-10030?
CVE-2018-10030 has a moderate severity rating due to its CSRF vulnerability allowing unauthorized actions.
2
How do I fix CVE-2018-10030?
To fix CVE-2018-10030, upgrade CMS Made Simple to version 2.2.8 or later where the vulnerability has been patched.
3
What types of attacks can CVE-2018-10030 lead to?
CVE-2018-10030 can lead to unauthorized changes in site preferences and potentially compromise the integrity of the CMS.
4
Is CVE-2018-10030 specific to certain versions of CMS Made Simple?
Yes, CVE-2018-10030 specifically affects CMS Made Simple versions up to and including 2.2.7.
5
How can I determine if my site is vulnerable to CVE-2018-10030?
You can determine if your site is vulnerable to CVE-2018-10030 by checking if you are running CMS Made Simple version 2.2.7 or earlier.