CVE-2018-16732

CVE-2018-16732

uploadpluginssysadminSetting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save.

Source: CVE-2018-16732