CVE-2024-26349

MEDIUM

Flusity - CSRF

Title source: rule

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_translation.php

Core 2

Core References

Broken Link

Exploit, Third Party Advisory

CVSS v3 4.3

EPSS 0.0005

EPSS Percentile 15.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-352

Status published

Products (1)

flusity/flusity 2.33

Published Feb 22, 2024

Tracked Since Feb 18, 2026