An issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the website settings via admin/aboutus.php.
{ "cpe": "cpe:2.3:a:portfoliocms_project:portfoliocms:1.0.5:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "1.0.5" }, { "last_affected": "1.0.5" } ], "source": "CPE_STRING" }
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-15849.json"