CVE-2017-6914

Name of the Vulnerable Software and Affected Versions BigTree CMS versions 4.1.18 through 4.2.16

Description The issue concerns a CSRF problem. It affects the "admin/ajax/users/delete/" page, specifically with the id parameter. This allows an unauthorized user deletion.

Recommendations For BigTree CMS versions 4.1.18 through 4.2.16, avoid using the id parameter in the "admin/ajax/users/delete/" page until the issue is resolved. As a temporary workaround, consider restricting access to the "admin/ajax/users/delete/" page to minimize the risk of exploitation.