CVE-2018-17103

Summary: 
** DISPUTED ** An issue was discovered in GetSimple CMS v3.3.13. There is a CSRF vulnerability that can change the administrator's password via admin/settings.php. NOTE: The vendor reported that the PoC was sending a value for the nonce parameter.
Published: 
Sunday, September 16, 2018 - 17:29
cvss: