VULNERABILITY INTELLIGENCE

CVE-2016-4891

CVSS score8.8 HIGH

EPSS probability0.98%

CISA KEVNot currently listed

Published2017-04-12

Last modified2026-06-17

Description

Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change settings via unspecified vectors.