CVE-2024-48341: Geeeeeeeek Dingfanzu

Low severity, CVSS 3.7. EPSS: 0.2% chance of exploitation in the next 30 days.

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addShop

Affected products

• Geeeeeeeek Dingfanzu: version 1.0 only

Published 2025-09-08. Last modified 2026-06-17.