CVE-2018-10132: Pbootcms

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

PbootCMS v0.9.8 has CSRF via an admin.php/Message/mod/id/19.html?backurl=/index.php request, resulting in PHP code injection in the recontent parameter.

Affected products

• Pbootcms Pbootcms: version 0.9.8 only

Published 2018-04-16. Last modified 2026-06-17.