← All advisories

Medium severity4.3NVD Advisory· Published Nov 13, 2023· Updated Jun 17, 2026

CVE-2023-48063

CVE-2023-48063

Description

An issue was discovered in dreamer_cms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/category/delete.

Affected products

2

dreamer_cms/dreamer_cmsdescription
Dreamer CMS/Dreamer CMSllm-fuzzy
Range: =4.1.3

Patches

Vulnerability mechanics

References

1

github.com/CP1379767017/cms/blob/dreamcms_vul/There%20is%20a%20CSRF%20vulnerability%20at%20th%20menu%20management%20location.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.