https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T20:25:41.729671+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2016-20054 fkie_cve-2016-20054 2026-10-15T20:25:41.754638+00:00

Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms. Attackers can trick authenticated administrators into submitting requests to admin/user_manipulate and admin/settings/generall endpoints to create users or modify application settings without explicit consent.

 https://db.gcve.eu/vuln/ghsa-3qcm-pj6q-w4c5 GHSA-3qcm-pj6q-w4c5 — Nodcms contains a cross-site request forgery vulnerability 2026-10-15T20:25:41.754771+00:00

Affected: Packagist: khodakhah/nodcms

Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms. Attackers can trick authenticated administrators into submitting requests to admin/user_manipulate and admin/settings/generall endpoints to create users or modify application settings without explicit consent.