An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:xiaocms:xiaocms_x1:20140305:*:*:*:*:*:*:*",
"range": [
{
"introduced": "20140305"
},
{
"last_affected": "20140305"
}
],
"source": "CPE_STRING"
}
]
}