Cross site request forgery (csrf)

2018-06-2914:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.1%

WSTMall v1.9.1_170316 has CSRF via the index.php?m=Admin&c=Users&a=edit URI to add a user account.

CPENameOperatorVersion
wstmalleq1.9.1-170316

CPE	Name	Operator	Version
	wstmall	eq	1.9.1-170316

References

github.com/wstmall/wstmall/issues/4