EPSS
Percentile
80.6%
The lack of CSRF check and sanitisation could allow attackers to perform CSRF attacks against logged in administrators, and set a Cross-Site Scripting payload via addons_title parameter in the CMDM_admin_settings page.
packetstormsecurity.com/files/129357/
www.securityfocus.com/bid/71418/