CVE-2021-37366 | BDVDB-2026-158488 Detail

Description#

CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel. By combining CSRF with XSS, an attacker can trick the administrator into clicking a link that cancels the filtering for all standard users.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://gitlab.com/marsat/CTparental/
https://gist.github.com/securylight/092ba96a660e07ad76f2a380c2eaa75a

Exploit#

No public exploit known

History#

Version 12021-08-10Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.