CVE-2023-43154

Name of the Vulnerable Software and Affected Versions Macrob7 Macs Framework Content Management System (CMS) version 1.1.4f

Description The issue is related to a PHP type confusion vulnerability due to loose comparison in the isValidLogin() function during a login attempt. This vulnerability can lead to authentication bypass and takeover of the administrator account.

Recommendations For Macrob7 Macs Framework Content Management System (CMS) version 1.1.4f, consider disabling the isValidLogin() function until a patch is available to prevent potential exploitation. Restrict access to the login functionality to minimize the risk of authentication bypass.