CVE-2026-39170

Description

SemCms 5.0 is vulnerable to Cross Site Request Forgery (CSRF) via crafted POST request to /admin/semcms_user.php.

PUBLISHED Reserved 2026-04-06 | Published 2026-06-09 | Updated 2026-06-09 | Assigner mitre

References

gist.github.com/...70-pixel/41e01787357416458212dbbfd06c6d73

cve.org (CVE-2026-39170)

nvd.nist.gov (CVE-2026-39170)

Download JSON