Michał Biesiada

**Name of the Vulnerable Software and Affected Versions** QuickCMS version 6.8 QuickCMS (affected versions not specified) **Description** QuickCMS is susceptible to Cross-Site Request Forgery (CSRF) across multiple endpoints. An attacker can create a malicious website that, when visited by a victim, automatically submits POST requests with the victim’s permissions. The software lacks CSRF protection mechanisms, making all forms potentially vulnerable. The vendor was informed of this issue but did not provide details regarding vulnerable versions. **Recommendations** Update to a newer version that contains a fix for this vulnerability. Implement CSRF protection mechanisms for all forms within the application.