CVE-2019-9598: Chshcms Cscms

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds.

Affected products

• Chshcms Cscms: version 4.1 only

Published 2019-03-07. Last modified 2026-06-17.