CVE-2010-0992: Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly...

Security readout for executives and security teams

This flaw lets an attacker trick a logged-in Pulse CMS administrator into unknowingly making site changes. Reported actions include uploading images, deleting images, and creating content blocks. The business concern is unauthorized website modification, not direct server takeover based on the supplied sources. Exposure is most likely where affected Pulse CMS versions are still deployed and administrators access the CMS through browsers while authenticated. The source bundle does not provide CPEs, CVSS, or a complete affected-version matrix. Treat this as a targeted website integrity risk for legacy Pulse CMS deployments. Prioritize if the CMS is internet-facing, still used by administrators, or supports business-critical public content. Mitigation focus: Identify any Pulse CMS Basic 1.2.2 or 1.2.3 installations.; Check Pulse CMS vendor guidance for fixed or unaffected versions.; Upgrade, retire, or isolate affected installations according to vendor guidance..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.