CVE-2017-6917: Bigtreecms Bigtree CMS

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Colophon can be changed.

Affected products

• Bigtreecms Bigtree CMS: version 4.2.16 only

Published 2017-03-15. Last modified 2026-06-17.