Easycms · Easycms · CVE-2018-12971
**Name of the Vulnerable Software and Affected Versions**
EasyCMS version 1.3
**Description**
The issue allows for CSRF via the "index.php?s=/admin/user/delAll" URI to delete users.
**Recommendations**
For EasyCMS version 1.3, consider implementing proper CSRF protection mechanisms, such as token-based validation, to prevent unauthorized actions like deleting users. As a temporary workaround, restrict access to the "index.php?s=/admin/user/delAll" URI to minimize the risk of exploitation.