p PatchFirst

CVE-2024-29338

CVE-2024-29338

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/categories/delete/2.

CVSS 2.4 · Low · EPSS 0.3%

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • anchorcms/anchor-cms Packagist

    Versions
    • 0.11
    • 0.12
    • 0.12.1
    • 0.12.3
    • 0.12.3a
    • 0.12.6
    • 0.12.7
    • 0.9
    • 0.9.1
    • 0.9.2
    • 0.9.3
    • 0.9.3-a
    • 0.9.3-b
    • 0.9.3.1-a
    Affected ranges
    • ECOSYSTEM: ≤ 0.12.7

    No fix published

Original sources

Check your server →