CVE-2019-7566

CSZ CMS 1.1.8 contains a CSRF vulnerability in the admin/users/new/add flow. Root cause: improper CSRF protection in the user-creation endpoint. Impact per CVSS3 is HIGH (C/H, I/H, A/H) with NETWORK attack vector, LOW attack complexity, NONE privileges, UI required; authenticated user interaction...

CVE-2019-7566: Cross-Site Request Forgery (CSRF)

CSZ CMS 1.1.8 has CSRF via admin/users/new/add...

CVE-2018-7590: Cross-Site Request Forgery (CSRF)

CSRF exists in Hoosk 1.7.0 via /admin/users/new/add, resulting in account creation...