PT-2018-10617

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.20180210 Description A CSRF issue was found in the "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" API endpoint, allowing an attacker to add an admin account. Recommendations For PublicCMS version...