CVE-2022-37730: Ftcms

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server (corresponding to the identity authentication information) as the victim without the victim's knowledge.

Affected products

• Ftcms Ftcms: version 2.1 only

Published 2022-09-07. Last modified 2026-06-17.