CVE-2025-7078 MEDIUM

CVE-2025-7078: 07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery

Vendor N/A
Product 07FLYCMS
Weakness CWE-352 · CSRF
Published July 6, 2025
Last update July 7, 2025

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability classified as problematic was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.3.9. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is published under multiple names. The vendor was contacted early about this disclosure but did not respond in any way.

Key dates

02Disclosure timeline

July 6, 2025 CVE published
July 7, 2025 Record updated

Related vulnerabilities

04Related CVE