Windu CMS Cross-Site Request Forgery Vulnerability in User Editing Functionality

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Windu CMS version 4.1, allowing attackers to bypass the implemented CSRF protection mechanism. This vulnerability arises from the ability to use another user's CSRF token, exploiting the open registration that permits anyone to create an account. The issue was reported to the vendor, but no details regarding the vulnerability or affected version range were provided.

Impact

Exploitation of this vulnerability allows for Cross-Site Request Forgery attacks, where an attacker can trick a user into performing actions they did not intend to.