CVE-2017-6916

Name of the Vulnerable Software and Affected Versions BigTree CMS version 4.1.18

Description The issue concerns a CSRF problem. It affects the "admin/settings/update/" page, specifically with the nav-social parameter. This allows an attacker to change the Navigation Social settings.

Recommendations For BigTree CMS version 4.1.18, consider restricting access to the "admin/settings/update/" page and the nav-social parameter to minimize the risk of exploitation. As a temporary workaround, avoid using the nav-social parameter in the affected page until the issue is resolved.