CVE-2022-44389

Name of the Vulnerable Software and Affected Versions EyouCMS version 1.5.9-UTF8-SP1

Description A Cross-Site Request Forgery (CSRF) issue was discovered in the Edit Admin Profile module, allowing attackers to arbitrarily change Administrator account information.

Recommendations For EyouCMS version 1.5.9-UTF8-SP1, consider disabling the Edit Admin Profile module until a patch is available to prevent exploitation of the CSRF issue. Restrict access to the Administrator account information to minimize the risk of unauthorized changes.