PT-2021-11024

Name of the Vulnerable Software and Affected Versions: EasyCMS version 1.6 Description: A CSRF issue was found that can add an admin account through the "index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent" API endpoint, then post username and password variables...