CVE-2026-39170

Description

SemCms 5.0 is vulnerable to Cross Site Request Forgery (CSRF) via crafted POST request to /admin/semcms_user.php.

CVSS Vector

References

• https://gist.github.com/ql288470-pixel/41e01787357416458212dbbfd06c6d73