Total
2
Critical
1
High
0
Medium
1
CISA KEV
0
IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF).
An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter in api/User/ChangeUser.