CVE-2018-15848

Name of the Vulnerable Software and Affected Versions portfolioCMS version 1.0.5

Description An issue was discovered that allows CSRF to create new pages. This can be done via the "admin/portfolio.php?newpage=true" endpoint.

Recommendations For portfolioCMS version 1.0.5, consider implementing CSRF protection measures to prevent unauthorized creation of new pages, such as validating tokens or headers to ensure requests are legitimate. As a temporary workaround, restrict access to the "admin/portfolio.php?newpage=true" endpoint to minimize the risk of exploitation.