CVE-2010-0992: Pulsecms Pulse CMS

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow remote attackers to hijack the authentication of users for requests that (1) upload image files, (2) delete image files, or (3) create blocks.

Affected products

• Pulsecms Pulse CMS: version 1.2.2 only; version 1.2.3 only; version 1.3.2 only

Published 2010-04-09. Last modified 2026-06-16.