Dazhouda Lecms Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in Dazhouda Lecms version 3.0.3. This issue affects the personal information page, specifically within the file 'index.php' when the 'my-profile-ajax-1' parameter is used. The vulnerability allows remote attackers to manipulate user actions related to personal information changes.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of the user, potentially allowing attackers to change personal information without consent.