CVE-2025-55041 | MuraCMS up to 10.1.10 User Management cUsers.cfc getUserManager groupId cross-site request forgery

A vulnerability marked as problematic has been reported in MuraCMS up to 10.1.10. This affects the function getUserManager of the file cUsers.cfc of the component User Management Handler. The manipulation of the argument groupId leads to cross-site request forgery.

This vulnerability is documented as CVE-2025-55041. The attack can be initiated remotely. There is not any exploit available.