A Cross-site request forgery (CSRF) vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password.
- https://github.com/chshcms/cscms/issues/37
No PoCs found on GitHub currently.