CVE-2018-9108: Cross-Site Request Forgery (CSRF)

CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges...

PT-2018-18857

Name of the Vulnerable Software and Affected Versions QuickAppsCMS version 2.0.0-beta2 Description The issue allows an unauthorized remote attacker to create an account with admin privileges due to a CSRF vulnerability in the /admin/user/manage/add API endpoint. Recommendations For QuickAppsCMS...