CVE-2026-92383
PbootCMS User Management UserController.php mod cross-site request forgery
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the function UserController::del/UserController::mod of the file apps/admin/controller/system/UserController.php of the component User Management. Such manipulation leads to cross-site request forgery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Upgrading to version 3.2.25 is able to resolve this issue. The name of the patch is c25241a0964742cefb7f698efbb6c38b868d6ff7. It is advisable to upgrade the affected component.
| CWE | CWE-352 CWE-862 |
| Vendor | n/a |
| Product | pbootcms |
| Published | Sep 16, 2026 |
| Last Updated | Sep 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a pbootcms
Be the first to know when new medium vulnerabilities affecting n/a pbootcms are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / PbootCMS
3.2.0 3.2.1 3.2.2 3.2.3 3.2.4 3.2.5 3.2.6 3.2.7 3.2.8 3.2.9 3.2.10 3.2.11 3.2.12 3.2.13 3.2.14 3.2.15 3.2.16 3.2.17 3.2.18 3.2.19 3.2.20 3.2.21 3.2.22 3.2.23 3.2.24
References
vuldb.com: https://vuldb.com/vuln/405519 vuldb.com: https://vuldb.com/vuln/405519/cti vuldb.com: https://vuldb.com/cve/CVE-2026-92383 vuldb.com: https://vuldb.com/submit/938602 github.com: https://github.com/pbootcmspro/PbootCMS/issues/70 github.com: https://github.com/pbootcmspro/PbootCMS/commit/c25241a0964742cefb7f698efbb6c38b868d6ff7 github.com: https://github.com/pbootcmspro/PbootCMS/releases/tag/V3.2.25
Credits
🔍 rockmelodeis (VulDB User)