DaiCuo CMS Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in DaiCuo CMS versions prior to 1.3.13. This issue affects the file '/admin.php/addon/index', where the application fails to properly verify if a request was intentionally made by the user. As a result, an attacker could exploit this vulnerability to perform actions on behalf of the user without their consent.

Impact

Exploitation of this vulnerability allows for cross-site request forgery, where an attacker can trick a user into performing actions they did not intend to, potentially leading to unauthorized changes or actions within the application.