CVE-2018-15851

2018-08-2521:29:01

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.5%

An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add.

CPENameOperatorVersion
flexo1.sourceeq0.1.6

CPE	Name	Operator	Version
	flexo1.source	eq	0.1.6

References

github.com/flexocms/flexo1.source/issues/25