CVE-2020-18460

Cross Site Request Forgery CSRF vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin&m=content...

CVE-2020-18460

711cms v1.0.7 is vulnerable to Cross Site Request Forgery (CSRF). The issue allows an attacker to cause the application to add an admin account via the endpoint admin.php?c=Admin&m=content. The provided connected records confirm the affected product/version and the vulnerable operation, with CSRF...