Michał Biesiada

**Name of the Vulnerable Software and Affected Versions** QuickCMS version 6.8 **Description** QuickCMS is susceptible to Cross-Site Request Forgery (CSRF), a flaw where an attacker tricks a victim into performing actions they did not intend to do on a web application. This occurs because the software lacks protection mechanisms for its forms, allowing an attacker to craft a malicious website that automatically sends POST requests using the victim's privileges across multiple endpoints. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.