CVE-2010-2282: Tomatocms

Medium severity, CVSS 5.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password.

Affected products

• Tomatocms Tomatocms: version 2.0.6 only

Published 2010-06-15. Last modified 2026-06-16.