CVE-2012-1901

CVE-2012-1901 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in FlexCMS versions 3.2.1 and earlier. These flaws allow attackers to hijack authenticated user sessions to modify account settings or, for administrators, to add new pages. With a CVSS score of 6.8 (Medium), exploitation requires user interaction (AC:M) but does not require authentication (Au:N), potentially leading to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). While there is no evidence of active exploitation, a proof-of-concept exploit is publicly available on ExploitDB, though community discussion and media coverage are minimal.