FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_update
- https://github.com/ysuzhangbin/cms2/blob/main/2.md
No PoCs found on GitHub currently.