CVE-2018-16337: Chshcms Cscms

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website's basic configuration via upload/admin.php/setting/save.

Affected products

• Chshcms Cscms: version 4.1.8 only

Published 2018-09-02. Last modified 2026-06-17.